RULE(RULE ID:714833)

Rule General Information
Release Date: 2021-03-26
Rule Name: EMC Data Protection Advisor Denial of Service Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: A denial of service vulnerability exists in EMC Data Protection Advisor. The vulnerability is due to a NULL pointer dereference when handling a non-existent password field in a AUTHENTICATECONNECTION message. A remote attacker can exploit this vulnerability by sending specially crafted requests to the vulnerable service. Successful exploitation could result in a denial of service condition.
Impact: An attacker can launch a denial of service attack by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.