Emc Cloud Tiering Appliance vulnerabilities

3 CVEs affecting Emc Cloud Tiering Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0645, published 2014-04-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0644, published 2014-04-17. High severity, CVSS 7.8. EPSS: 53.3% chance of exploitation in the next 30 days. EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity…
CVE-2012-2285, published 2012-08-29. Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days. EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows remote attackers to obtain GUI administrative access…
CVE-2014-0645, published 2014-04-17. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for…