CVE-2017-8011
CriticalSummary
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, and EMC M&R for SAS Solution Packs contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with knowledge of the default password may use these accounts to run arbitrary web service and remote procedure calls on the affected system.
Risk Assessment
The risk to the organization is the potential for unauthorized access to the system, which could lead to the execution of malicious operations and data breaches.
Recommendation
It is recommended to change the default passwords for all accounts and to monitor system access to detect potential unauthorized access attempts.
Original NVD description (English source)
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Packs all versions) contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with the knowledge of the default password may potentially use these accounts to run arbitrary web service and remote procedure calls on the affected system.