Skip to content
OpenAdvisories
High · 8.1 CVE-2022-29084 EUVD-2022-33495GHSA-x6g3-9cv4-7822

Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere G…

Published Jun 2, 2022 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account takeover is possible if weak passwords are used by users.

Affected products

VendorProductAffectedFixed
Dell Unity unspecified – < 5.2.0.0.5.173 5.2.0.0.5.173

References