ID: CVE-2014-0645

Last Modified: April 17, 2014

EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.

Access Vector: Local

Access Complexity: Medium

Authentication: None

Confidentiality Impact: Complete

Integrity Impact: None

Availability Impact: None

Base Score: 4.7

Exploitability Score: 3.4

Impact Score: 6.9

CVSS V2: AV:L/AC:M/Au:N/C:C/I:N/A:N

Specialize CVSS-Score

CWE-255

Condition Configuration
AND
OR
OR
Alle Schwachstellen für emc
Alle Schwachstellen für emc
Alle Schwachstellen für emc
OR
OR
Alle Schwachstellen für emc
Condition Configuration
AND
OR
OR
Alle Schwachstellen für emc
OR
OR
Alle Schwachstellen für emc
                    <?xml version="1.0" ?>
<set operator="and">
    <set operator="or">
        <set operator="and">
            <set operator="or">
                <prop key="application" value="cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:-:*:*:*:*:*:*"/>
                <prop key="application" value="cpe:2.3:a:emc:cloud_tiering_appliance_software:9.0:*:*:*:*:*:*:*"/>
                <prop key="application" value="cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:sp1:*:*:*:*:*:*"/>
            </set>
            <set operator="or">
                <prop key="device" value="cpe:2.3:h:emc:cloud_tiering_appliance:-:*:*:*:*:*:*:*"/>
            </set>
        </set>
        <set operator="and">
            <set operator="or">
                <prop key="application" value="cpe:2.3:a:emc:file_management_appliance_software:7.0:*:*:*:*:*:*:*"/>
            </set>
            <set operator="or">
                <prop key="device" value="cpe:2.3:h:emc:file_management_appliance:-:*:*:*:*:*:*:*"/>
            </set>
        </set>
    </set>
    <prop key="program_influence" value="input"/>
    <prop key="range" value="local"/>
</set>

                  
                      <?xml version="1.0" ?>
<set operator="and">
    <set operator="or">
        <set operator="and">
            <set operator="or">
                <prop key="application" value="cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:-:*:*:*:*:*:*"/>
                <prop key="application" value="cpe:2.3:a:emc:cloud_tiering_appliance_software:9.0:*:*:*:*:*:*:*"/>
                <prop key="application" value="cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:sp1:*:*:*:*:*:*"/>
            </set>
            <set operator="or">
                <prop key="device" value="cpe:2.3:h:emc:cloud_tiering_appliance:-:*:*:*:*:*:*:*"/>
            </set>
        </set>
        <set operator="and">
            <set operator="or">
                <prop key="application" value="cpe:2.3:a:emc:file_management_appliance_software:7.0:*:*:*:*:*:*:*"/>
            </set>
            <set operator="or">
                <prop key="device" value="cpe:2.3:h:emc:file_management_appliance:-:*:*:*:*:*:*:*"/>
            </set>
        </set>
    </set>
    <prop key="program_influence" value="input"/>
    <prop key="data" value="any"/>
    <prop key="data_influence" value="read"/>
    <prop key="range" value="local"/>
</set>