CVE-2017-8013 Hardcoded credentials in EMC Data Protection Advisor
Hardcoded credentials in EMC Data Protection Advisor allow attackers to gain unauthorized administrative access via REST APIs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-8013?
CVE-2017-8013 is a critical vulnerability in Dell EMC EMC Data Protection Advisor, published on 16 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password could potentially use these accounts via REST APIs to gain unauthorized access to EMC Data Protection Advisor (including potentially access with administrative privileges).
Weakness: CWE-798
Which versions are affected by CVE-2017-8013?
It affects 1 product.
Products include Emc Data Protection Advisor.
How do I fix CVE-2017-8013?
No fix has been published for CVE-2017-8013 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-8013 being exploited?
There is no known exploitation of CVE-2017-8013 in the wild and no public exploit code.
Other vulnerabilities in Dell EMC EMC Data Protection Advisor
- CVE-2017-10955 Command injection in Dell EMC Data Protection Advisor
- CVE-2017-8002 SQL injection in EMC Data Protection Advisor prior to 6.4
- CVE-2018-1206 Hardcoded credentials in Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110
- CVE-2012-0406 Null dereference in n/a
- CVE-2012-4616 Path traversal in n/a
Sources
Also known as GHSA-8w8f-9qch-h5wm.