Unscored severity · published Apr 17, 2014
CVE-2014-0645
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it…
–
CVSS
0.3%
EPSS
No
On KEV
Description
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CT
Cloud Tiering Appliance · Emc
All versions, or not specified · source: NVD
CT
Cloud Tiering Appliance Software · Emc
9.0; 10.0; 10.0 · source: NVD
FM
File Management Appliance · Emc
All versions, or not specified · source: NVD
FM
File Management Appliance Software · Emc
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0645
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0645
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html
seclists.org
http://seclists.org/fulldisclosure/2014/Mar/426
gist.github.com
https://gist.github.com/brandonprry/9895721
More from Cloud Tiering Appliance
–
CVE-2014-0644
EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in…
–
CVE-2012-2285
EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows remote attackers to obtain GUI…