Skip to content
8.1 High

CVE-2022-29084 Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication…

Description

Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account takeover is possible if weak passwords are used by users.

Affected products and versions

Product Affected versions Fixed in
Unity 5.2 earliest → < 5.2.0.0.5.173 5.2.0.0.5.173
The 62 CVEs of Unity →
Track this CVE