CVE-2018-11062
Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
02 Nov 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default passwords may potentially log in to the system and gain read and write access to certain system files.
Affected products
Dell EMC · Integrated Data Protection ApplianceWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →