CVE-2014-0632
HighSummary
Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Risk Assessment
This vulnerability could lead to unauthorized access to the system and execution of malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to version 5.3 or later to mitigate this vulnerability and to monitor system access.
Other vulnerabilities in EMC VPLEX GeoSynchrony
See all- CVE-2015-6850High
EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, allowing local users to gain privileges by leveraging a login session.
- CVE-2014-0633High
The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
Original NVD description (English source)
Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.