CVE-2012-0406: emc data_protection_advisor
Vulnerability summary
CVE-2012-0406 is a high (CVSS 7.8) vulnerability in emc data_protection_advisor. EPSS estimates a 8.55% chance of exploitation in the next 30 days, higher than 95% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 20-04-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
8.55%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 8.55% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (aluigi.altervista.org)
Maturity: unknown
EMC Data Protection Advisor 5.8.1 - Denial of Service
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Emc1 product
- data_protection_advisor5.5 | 5.5:sp1 | 5.6 | 5.6:sp1 | 5.7 | 5.7:sp1 | 5.8 | 5.8:sp1
1 vendor · 1 product