{"id":"CVE-2015-0529","aliases":["EUVD-2015-0542","GHSA-rr5h-c862-f7w5"],"status":"published","title":"EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate...","description":"EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02847,"percentile":0.8678,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-255"],"published":"2015-04-05T01:00:00Z","modified":"2026-06-17T00:20:28Z","products":[{"vendor":"emc","product":"powerpath_virtual_appliance"}],"references":[{"url":"http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2015/Apr/1","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0529"},{"url":"https://github.com/advisories/GHSA-rr5h-c862-f7w5"}],"sources":{"cve":[{"id":"CVE-2015-0529","description":"EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.","status":"published","published":"2015-04-05T01:00:00Z","modified":"2024-08-06T04:10:11.061Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0542","description":"EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.","status":"published","published":"2015-04-05T01:00:00Z","modified":"2024-08-06T04:10:11Z","updated_at":"2026-11-03T02:22:18.860994Z"}],"ghsa":[{"id":"GHSA-rr5h-c862-f7w5","title":"EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate...","description":"EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.","status":"published","published":"2022-05-17T03:49:57Z","modified":"2023-01-27T05:08:21Z","updated_at":"2026-11-02T14:43:17.252355Z"}],"nvd":[{"id":"CVE-2015-0529","description":"EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.","status":"published","published":"2015-04-05T01:59:00.07Z","modified":"2026-06-17T00:20:28.5Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:03:03.313464Z"}]}}