CVE-2017-14376

EUVD-2017-5879 · Published Nov 1, 2017

EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system.

Technologies

Emc Appsync

Weaknesses

CWE-798

CVSS scores

v3.07.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Persistence Privilege Escalation Stealth Credential Access

T1068Exploitation for Privilege Escalation T1078.001Default Accounts T1552.001Credentials In Files

References

http://seclists.org/fulldisclosure/2017/Oct/68
http://www.securityfocus.com/bid/101626

Potentially impacted assets

See if this affects your attack surface