Vulnerabilities > CVE-2022-29084 - Improper Restriction of Excessive Authentication Attempts vulnerability in Dell products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account takeover is possible if weak passwords are used by users.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 6 |