Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-6650

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system.

Published

2017-03-21T16:59:00.193

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

4.9

Impact Score

2.9

Weaknesses

Type: Primary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	emc	recoverpoint	≤ 4.4.1.1	Yes
Application	emc	recoverpoint_for_virtual_machines	≤ 4.4.1.1	Yes

References

http://www.securityfocus.com/archive/1/540303/30/0/threaded Mitigation, Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/96156 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1038066 ([email protected])
http://www.securityfocus.com/archive/1/540303/30/0/threaded Mitigation, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/96156 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1038066 (af854a3a-2127-422b-91ae-364da2661108)