CVEvulnerability

CVE-2017-14375

9.8 CRITICAL Published 2017-11-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-290

Description

EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier) contain an authentication bypass vulnerability that may potentially be exploited by malicious users to compromise the affected system.

Affected configurations

• dell emc unisphere (< 8.4.0.15) • emc solutions enabler (< 8.4.0.15) • emc vasa (< 8.4.0.512) • emc vmax emanagement (<= 1.4)

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References