Unscored severity · published Apr 20, 2012
CVE-2012-0406
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer…
–
CVSS
8.6%
EPSS
No
On KEV
Description
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DP
Data Protection Advisor · Emc
5.5; 5.5; 5.6; 5.6; 5.7; 5.7; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0406
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0406
Exploit
http://aluigi.altervista.org/adv/dpa_1-adv.txt
www.exploit-db.com
http://www.exploit-db.com/exploits/18688/
www.securityfocus.com
http://www.securityfocus.com/archive/1/522408/30/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1026956
More from Data Protection Advisor
9.8
CVE-2017-8013
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges
8.8
CVE-2017-10955
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0
8.8
CVE-2017-8002
EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities
7.8
CVE-2018-1206
Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with…
4.9
CVE-2017-8003
EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability