VULNERABILITY INTELLIGENCE
CVE-2012-0406
CVSS score7.8 HIGH
EPSS probability8.55%
CISA KEVNot currently listed
Published2012-04-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.