CVE:CVE-2018-1216
CNNVD:CNNVD-201803-237
Dell EMC Unisphere for VMAX Virtual Appliance等都是美国戴尔（Dell）公司的产品。Dell EMC Unisphere for VMAX Virtual Appliance（vApp）是一款针对VMAX存储阵列的管理工具。EMC Solutions Enabler Virtual Appliance是一款解决方案应用虚拟设备。vApp Manager是其中的一个vApp管理工具。
多款Dell产品中的vApp Manager存在安全漏洞，该漏洞源于默认的账户（smc）使用了硬编码密码。远程攻击者可利用该漏洞获取未授权的系统访问权限。以下产品和版本受到影响：Dell EMC Unisphere for VMAX Virtual Appliance 8.4.0.18之前版本；Dell EMC Solutions Enabler Virtual Appliance 8.4.0.21之前版本；Dell EMC VASA Virtual Appliance 8.4.0.514之前版本；Dell EMC VMAX Embedded Management (eManagement) 1.4及之前版本(Enginuity Release 5977.1125.1125及之前版本)。
solution:Upgrade dell emc_solutions_enabler_virtual_appliance to a higher version than 8.4.0.21,and avoid the version (,8.4.0.21); Upgrade dell emc_unisphere_for_vmax_virtual_appliance to a higher version than 8.4.0.18,and avoid the version (,8.4.0.18); Upgrade dell emc_vasa_virtual_appliance to a higher version than 8.4.0.514,and avoid the version (,8.4.0.514); Upgrade dell emc_vmax_embedded_management to a higher version than 1.4,and avoid the version (,1.4]