| CVE-2017-8011 | Date: (C)2017-07-18 (M)2023-12-22 |
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Packs all versions) contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with the knowledge of the default password may potentially use these accounts to run arbitrary web service and remote procedure calls on the affected system.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V3 Severity: | CVSS V2 Severity: |
| CVSS Score : 9.8 | CVSS Score : 10.0 |
| Exploit Score: 3.9 | Exploit Score: 10.0 |
| Impact Score: 5.9 | Impact Score: 10.0 |
| |
| CVSS V3 Metrics: | CVSS V2 Metrics: |
| Attack Vector: NETWORK | Access Vector: NETWORK |
| Attack Complexity: LOW | Access Complexity: LOW |
| Privileges Required: NONE | Authentication: NONE |
| User Interaction: NONE | Confidentiality: COMPLETE |
| Scope: UNCHANGED | Integrity: COMPLETE |
| Confidentiality: HIGH | Availability: COMPLETE |
| Integrity: HIGH | |
| Availability: HIGH | |
| | |
