High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-03-16	CVE-2017-8013	Use of Hard-coded Credentials vulnerability in EMC Data Protection Advisor 6.3.0/6.4.0 EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. network low complexity emc CWE-798	7.5
2018-03-12	CVE-2018-1206	Use of Hard-coded Credentials vulnerability in EMC Data Protection Advisor 6.3.0/6.4.0 Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. local low complexity emc CWE-798	7.2
2017-10-19	CVE-2017-10955	Improper Input Validation vulnerability in EMC Data Protection Advisor 6.3.0 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. network low complexity emc CWE-20	8.8
2012-04-20	CVE-2012-0406	Permissions, Privileges, and Access Controls vulnerability in EMC Data Protection Advisor The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password. network low complexity emc CWE-264	7.8