Emc Vplex Geosynchrony vulnerabilities

6 CVEs affecting Emc Vplex Geosynchrony, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6850, published 2015-12-28.

More from Emc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-0632, published 2014-04-01. High severity, CVSS 9.0. EPSS: 4.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.
• CVE-2014-0635, published 2014-04-01. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.
• CVE-2014-0634, published 2014-04-01. Medium severity, CVSS 6.0. EPSS: 1% chance of exploitation in the next 30 days. EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially…
• CVE-2014-0633, published 2014-04-01. High severity, CVSS 7.7. EPSS: 0.8% chance of exploitation in the next 30 days. The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an…
• CVE-2015-6850, published 2015-12-28. High severity, CVSS 8.4. EPSS: 0.5% chance of exploitation in the next 30 days. EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session.
• CVE-2015-6847, published 2015-11-18. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows local users to obtain sensitive information by reading this…