Dell Emc Storage Monitoring And Reporting vulnerabilities

2 vulnerabilities

Known vulnerabilities in Dell Emc Storage Monitoring And Reporting, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2017-8011dellemc_m\&r+3
EPSS score
14.02%
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Packs all versions) contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with the knowledge of the default password may potentially use these accounts to run arbitrary web service and remote procedure calls on the affected system.10CVE-2019-18580dellemc_storage_monitoring_and_reporting+1
EPSS score
4.88%
Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host.