PT-2019-16703 · Dell · Dell Emc Ecs

Published 2019-09-27 · Updated 2019-10-09 · CVE-2019-3766

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC ECS versions prior to 3.4.0.0

Description The issue concerns an improper restriction of excessive authentication attempts, allowing an unauthenticated remote attacker to potentially perform a password brute-force attack and gain access to targeted accounts.

Recommendations For versions prior to 3.4.0.0, update to version 3.4.0.0 or later to resolve the issue.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2019-3766

Affected Products

Dell Emc Ecs

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-3766 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3766 · Vendor Advisory
• https://dell.com/support/security/en-us/details/537465/DSA-2019-140-Dell-EMC-Elastic-Cloud-Storage-ECS-Improper-Restriction-of-Excessive-Authenticatio · Vendor Advisory