Dell EMC Patches Critical Flaws in VMAX Enterprise Storage Systems

Dell EMC fixed two critical flaws in its management interfaces for its VMAX enterprise storage systems. One of the vulnerabilities could allow a remote attacker to use a hard-coded password to a default account to gain unauthorized access to systems. The company issued updates that address the tw...

Vulnerability of EMC Unisphere for VMAX Virtual Appliance, EMC VMAX Embedded Management, EMC VASA Virtual Appliance, and EMC Solutions Enabler Virtual Appliance systems lies in their lack of access control mechanisms. This vulnerability allows attackers to bypass authentication procedures.

The vulnerabilities of EMC Unisphere for VMAX Virtual Appliance, EMC VMAX Embedded Management, EMC VASA Virtual Appliance, and EMC Solutions Enabler Virtual Appliance are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass...

EMC Unisphere For VMAX vApp Manager ORBServlet Remote Credential Creation Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Unisphere For VMAX vApp Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ORBServlet. The vulnerability is caused by improper...

EMC Unisphere for VMAX Virtual Appliance < 8.4.0.15 Authentication Bypass Vulnerability

The version of EMC Unisphere for VMAX Virtual Appliance running on the remote host is prior to 8.4.0.15. It is, therefore, affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104390; scriptversion"1.9";...

Authentication flaw

EMC Unisphere for VMAX Virtual Appliance vApp versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management eManagement versions prior to and including 1.4 Enginuity Release...

CVE-2017-14375

EMC Unisphere for VMAX Virtual Appliance vApp versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management eManagement versions prior to and including 1.4 Enginuity Release...

CVE-2017-14375

EMC Unisphere for VMAX Virtual Appliance vApp versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management eManagement versions prior to and including 1.4 Enginuity Release...

CVE-2017-14375

EMC Unisphere for VMAX Virtual Appliance vApp versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management eManagement versions prior to and including 1.4 Enginuity Release...

CVE-2017-14375

EMC CVE-2017-14375 is an authentication bypass vulnerability affecting multiple EMC appliances: Unisphere for VMAX Virtual Appliance vApp Manager, Solutions Enabler Virtual Appliance, VASA Provider Virtual Appliance, and VMAX eManagement. Affected versions (per sources) are: Unisphere vApp before...

Authentication Bypass Vulnerability in Multiple EMC Products

EMC Unisphere for VMAX Virtual Appliance and others are products of EMC Corporation USA.EMC Unisphere for VMAX Virtual Appliance vApp is a management tool for VMAX storage arrays.Solutions Enabler Virtual Appliance is a set of solutions application virtual appliances. An authentication bypass...

EMC VMAX Virtual Appliance (vApp) Authentication Bypass Vulnerability

The vApp Manager which is embedded in EMC Unisphere for VMAX, Solutions Enabler, VASA Virtual Appliances, and EMC VMAX Embedded Management eManagement contains an authentication bypass vulnerability that may potentially be exploited by malicious users to compromise the affected system. Affected...

EMC Unisphere for VMAX Virtual Appliance 8.x < 8.3.0 RCE

The version of EMC Unisphere for VMAX Virtual Appliance running on the remote host is 8.x prior to 8.3.0. It is, therefore, affected by multiple vulnerabilities : - Multiple flaws exist in the web interface related to the GeneralCmdRequest, PersistantDataRequest, and GetCommandExecRequest classes...

EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance Arbitrary Command Execution Vulnerability (CNVD-2016-08762)

EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance are both products of EMC. The former is a set of VMAX virtual storage series of management equipment, the latter is a set of solutions application virtual appliance. vApp Managers web application is one of the Web...

EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance Arbitrary Command Execution Vulnerability

EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance are both products of EMC. The former is a set of VMAX virtual storage series of management equipment, the latter is a set of solutions application virtual appliance. vApp Managers web application is one of the Web...

CVE-2016-6646

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...

CVE-2016-6645

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

CVE-2016-6645

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

Design/Logic Flaw

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...

Design/Logic Flaw

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

CVE-2016-6646

The CVE-2016-6646 entry concerns EMC Unisphere for VMAX Virtual Appliance (vApp Manager) and Solutions Enabler Virtual Appliance. Affects 8.x releases prior to 8.3.0 where the vApp Manager web application processes crafted input via GetSymmCmdRequest or RemoteServiceHandler classes, enabling remo...