Emc Cloud Tiering Appliance Software vulnerabilities

2 CVEs affecting Emc Cloud Tiering Appliance Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0645, published 2014-04-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0644, published 2014-04-17. High severity, CVSS 7.8. EPSS: 53.3% chance of exploitation in the next 30 days. EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity…
CVE-2014-0645, published 2014-04-17. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for…