High severity · published Mar 21, 2017
CVE-2016-6650
EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by…
7.5
CVSS
1.6%
EPSS
No
On KEV
Description
EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Recoverpoint · Emc
through 4.4.1.1 · source: NVD
RF
Recoverpoint For Virtual Machines · Dell
through 4.4.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6650
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6650
Mitigation
http://www.securityfocus.com/archive/1/540303/30/0/threaded
Third Party Advisory
http://www.securityfocus.com/bid/96156
www.securitytracker.com
http://www.securitytracker.com/id/1038066
More from Recoverpoint For Virtual Machines
10.0
CVE-2026-22769
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
9.8
CVE-2024-28980
Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH
9.8
CVE-2024-48007
Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability
9.8
CVE-2024-38488
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability
9.8
CVE-2024-22426
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability