CVE-2022-29084 HIGH

CVE-2022-29084

Vendor Dell
Product Unity
Weakness CWE-307 · Brute force
Published June 2, 2022
Last update September 17, 2024

CVSS base score

8.1/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account takeover is possible if weak passwords are used by users.

Key dates

02Disclosure timeline

June 2, 2022 CVE published
September 17, 2024 Record updated