CVE-2012-0406: Emc Data Protection Advisor

High severity, CVSS 7.8. EPSS: 8.6% chance of exploitation in the next 30 days.

The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.

Affected products

• Emc Data Protection Advisor: version 5.5 only; version 5.6 only; version 5.7 only; version 5.8 only

Published 2012-04-20. Last modified 2026-06-16.