Dell Emc M&r vulnerabilities

3 CVEs affecting Dell Emc M&r, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8012, published 2017-09-22.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-8011, published 2017-07-17. Critical severity, CVSS 9.8. EPSS: 14% chance of exploitation in the next 30 days. EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution…
• CVE-2017-8007, published 2017-09-22. High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days. In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice…
• CVE-2017-8012, published 2017-09-22. High severity, CVSS 7.4. EPSS: 1.9% chance of exploitation in the next 30 days. In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol used to communicate between components in the Alerting and/or…