Emc Powerpath Virtual Appliance vulnerabilities

2 CVEs affecting Emc Powerpath Virtual Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0890, published 2017-02-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0529, published 2015-04-05. Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days. EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive…
CVE-2016-0890, published 2017-02-03. Medium severity, CVSS 6.4. EPSS: 0.7% chance of exploitation in the next 30 days. EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive information disclosure vulnerability that may potentially be…