CVE-2017-8013

moderate-risk
Published 2018-03-16

EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password could potentially use these accounts via REST APIs to gain unauthorized access to EMC Data Protection Advisor (including potentially access with administrative privileges).

Do I need to act?

~
1.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (2)

Data Protection Advisor
Data Protection Advisor

Affected Vendors

Emc

References (6)

Mailing List http://seclists.org/fulldisclosure/2017/Sep/36
Third Party Advisory http://www.securityfocus.com/bid/100846
Third Party Advisory http://www.securitytracker.com/id/1039370
Mailing List http://seclists.org/fulldisclosure/2017/Sep/36
Third Party Advisory http://www.securityfocus.com/bid/100846
Third Party Advisory http://www.securitytracker.com/id/1039370
43
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 4/34 · Minimal
Exposure 7/34 · Low