CVE-2014-0645

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-17 · updated 2026-06-17
Weakness: CWE-255

Description

EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.

Affected products

EMC Cloud Tiering Appliance: all versions
EMC Cloud Tiering Appliance Software: 9.0, 10.0, 10.0-sp1
EMC File Management Appliance: all versions
EMC File Management Appliance Software: 7.0

References

http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html
http://seclists.org/fulldisclosure/2014/Mar/426
https://gist.github.com/brandonprry/9895721
http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html
http://seclists.org/fulldisclosure/2014/Mar/426
https://gist.github.com/brandonprry/9895721

Get alerted when CVE-2014-0645 or the next vulnerability affects your stack