Vulnerability in Dell EMC Vplex Geosynchrony
CVE-2018-11078
Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.008 (53.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 53rd percentile — 53.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
- Dell EMC Vplex Geosynchrony
- Dell EMC Vplex Software: Geosynchrony — versions unspecified
Weakness classification (CWE)
References
- www.securitytracker.com/id/1041613 (VDB Entry, Third Party Advisory, vdb-entry)
- seclists.org/fulldisclosure/2018/Sep/10 (mailing-list, Mailing List, Third Party Advisory)
Frequently asked questions
- What is CVE-2018-11078?
- CVE-2018-11078 is a medium-severity vulnerability in Dell EMC Vplex Geosynchrony, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 4.0/10. Published 2018-09-11.
- How severe is CVE-2018-11078?
- Medium severity. CVSS v3 base score is 4.0 out of 10.