CVE-2017-8012

The CVE pertains to Dell EMC/VNX Monitoring and Reporting (RMI Registry) deserialization vulnerability that can be exploited remotely to cause a DoS. The attack path involves the exposed RMI registry (default port 52569) accepting untrusted data; authentication exists but can be bypassed per the ...

CVE-2019-18580

Dell EMC Storage Monitoring and Reporting (SMR) 4.3.1 is affected by a Java RMI deserialization vulnerability that allows remote code execution without authentication. The flaw exists in the Java RMI service (default port 52569 per ZDI) and enables an attacker to send crafted requests to execute ...

CVE-2017-8007

Dell EMC VNX Monitoring and Reporting Scheduler Directory Traversal Remote Code Execution vulnerability (CVE-2017-8007) affects EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs where the Webservice Gateway processes inputs unsafely, enabling a directory traversal seq...

CVE-2017-8011

CVE-2017-8011 is substantiated by connected disclosures indicating default/undocumented accounts with passwords in EMC/VNX monitoring products, enabling remote execution when the Webservice Gateway/RMI JMX are targeted. ZDI-17-505 details a remote code execution path via static credentials in the...