CVE-2014-4620

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-25 · updated 2026-06-17
Weakness: CWE-200

Description

The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.

Affected products

EMC NetWorker prior to 8.2.4.9, 9.0.x (all supported versions), prior to 9.1.1.3, prior to 9.2.0.4: all versions
Meditech: 3.0-87, 3.0-90

References

http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html
http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html
http://secunia.com/advisories/61952
http://www.securityfocus.com/bid/70726
http://www.securitytracker.com/id/1031116
https://exchange.xforce.ibmcloud.com/vulnerabilities/97756
http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html
http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html
http://secunia.com/advisories/61952
http://www.securityfocus.com/bid/70726
http://www.securitytracker.com/id/1031116
https://exchange.xforce.ibmcloud.com/vulnerabilities/97756

Get alerted when CVE-2014-4620 or the next vulnerability affects your stack