Vulnerability Report

CVE-2016-6650

Title: Emc Recoverpoint Information Disclosure

Information Disclosure

Proof Of Concept

No public PoC currently indexed for CVE-2016-6650.

CWE Category CWE-200

Published Date Mar 21, 2017

Modified Date Jul 10, 2026

Exploit Status Not Found

Score 7.5 CVSS v3.0

Exploit Probability (EPSS)

1.63%

Vulnerability Summary

CVE-2016-6650: EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system.

Impacted Vendors

emc 2

dell 1

Reference Links

http://www.securityfocus.com/archive/1/540303/30/0/threaded http://www.securityfocus.com/bid/96156 http://www.securitytracker.com/id/1038066 http://www.securityfocus.com/archive/1/540303/30/0/threaded http://www.securityfocus.com/bid/96156 http://www.securitytracker.com/id/1038066

CVSS v3.0

Source Entity [email protected]

Severity HIGH

7.5

Attack Vector

NETWORK

Complexity

HIGH

Privileges

N/A

Interaction

REQUIRED

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

Source Entity [email protected]

Severity LOW

2.6

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:H/Au:N/C:P/I:N/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns