CVE-2014-0645
Severity Score
4.7
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.
EMC Cloud Tiering Appliance (CTA) 9.x hasta 10 SP1 y File Management Appliance (FMA) 7.x almacene hashes de contraseñas DES para las cuentas root, super, y de administración, lo que facilita a atacantes dependientes de contexto obtener información sensible a través de un ataque de fuerza bruta.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-01-02 CVE Reserved
- 2014-04-16 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-255: Credentials Management Errors
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html | Mailing List | |
| http://seclists.org/fulldisclosure/2014/Mar/426 | Mailing List |
|
| https://gist.github.com/brandonprry/9895721 | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Emc Search vendor "Emc" | Cloud Tiering Appliance Software Search vendor "Emc" for product "Cloud Tiering Appliance Software" | 9.0 Search vendor "Emc" for product "Cloud Tiering Appliance Software" and version "9.0" | - |
Affected
| in | Emc Search vendor "Emc" | Cloud Tiering Appliance Search vendor "Emc" for product "Cloud Tiering Appliance" | - | - |
Affected
|
| Emc Search vendor "Emc" | Cloud Tiering Appliance Software Search vendor "Emc" for product "Cloud Tiering Appliance Software" | 10.0 Search vendor "Emc" for product "Cloud Tiering Appliance Software" and version "10.0" | - |
Affected
| in | Emc Search vendor "Emc" | Cloud Tiering Appliance Search vendor "Emc" for product "Cloud Tiering Appliance" | - | - |
Affected
|
| Emc Search vendor "Emc" | Cloud Tiering Appliance Software Search vendor "Emc" for product "Cloud Tiering Appliance Software" | 10.0 Search vendor "Emc" for product "Cloud Tiering Appliance Software" and version "10.0" | sp1 |
Affected
| in | Emc Search vendor "Emc" | Cloud Tiering Appliance Search vendor "Emc" for product "Cloud Tiering Appliance" | - | - |
Affected
|
| Emc Search vendor "Emc" | File Management Appliance Software Search vendor "Emc" for product "File Management Appliance Software" | 7.0 Search vendor "Emc" for product "File Management Appliance Software" and version "7.0" | - |
Affected
| in | Emc Search vendor "Emc" | File Management Appliance Search vendor "Emc" for product "File Management Appliance" | - | - |
Affected
|