CVE-2019-3746Improper Restriction of Excessive Authentication Attempts in Dell Integrated Data Protection Appliance

Severity
8.8HIGHNVD
EPSS
0.9%
top 23.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 27
Latest updateMay 24

Description

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. An authenticated remote user may exploit this vulnerability to launch a brute-force authentication attack in order to gain access to the system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-3q4q-6vxp-x66f: Dell EMC Integrated Data Protection Appliance versions prior to 22022-05-24
CVEList
CVE-2019-3746: Dell EMC Integrated Data Protection Appliance versions prior to 22019-09-27
CVE-2019-3746 — Dell vulnerability | cvebase