Emc Cloud Tiering Appliance vulnerabilities

3 vulnerabilities

Known vulnerabilities in Emc Cloud Tiering Appliance, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2014-0644emccloud_tiering_appliance+1
EPSS score
53.34%
EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by reading the /etc/shadow file.4.7CVE-2014-0645emccloud_tiering_appliance+3
EPSS score
0.32%
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.6.8CVE-2012-2285emccloud_tiering_appliance+1
EPSS score
1.40%
EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase.