VULNERABILITY INTELLIGENCE

CVE-2018-11062

CVSS score8.8 HIGH

EPSS probability1.77%

CISA KEVNot currently listed

Published2018-11-02

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default passwords may potentially log in to the system and gain read and write access to certain system files.

Weakness classification

CWE-798: Use of Hard-coded Credentials

Primary references

security_alert@emc.com — Third Party Advisory, VDB Entry
security_alert@emc.com — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory