CVE-2014-0633
HighSummary
The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
Risk Assessment
Attackers may exploit this vulnerability to remotely execute malicious code, potentially leading to system compromise and data loss.
Recommendation
It is recommended to upgrade to version 5.3 or later to ensure proper validation of session-timeout values.
Other vulnerabilities in EMC VPLEX GeoSynchrony
See all- CVE-2015-6850High
EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, allowing local users to gain privileges by leveraging a login session.
- CVE-2014-0632High
Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Original NVD description (English source)
The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.