Read the docs
TI-2015-05746 Aliases CVE-2015-6850GHSA-h37p-j545-x7c4

EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password…

Priority LOW 37CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session.

Why it matters now

EPSS 0.00539 45th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:emc:vplex_geosynchrony:5.4:sp1:*:*:*:*:*:*5.4 sp1VulnerableEMC
cpe:2.3:a:emc:vplex_geosynchrony:5.5:*:*:*:*:*:*:*5.5VulnerableEMC
  • cpe:2.3:a:emc:vplex_geosynchrony:5.4:sp1:*:*:*:*:*:* Versions 5.4 sp1 Vulnerable ·EMC
  • cpe:2.3:a:emc:vplex_geosynchrony:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·EMC

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-6850
  2. 2026-10-03 Alias added: GHSA-h37p-j545-x7c4

References

Other 2

  • TI-2014-00602 Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows… CVSS 2.0HIGH 9.0
  • TI-2014-00605 Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows… CVSS 2.0HIGH 7.5
  • TI-2014-00603 The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate… CVSS 2.0HIGH 7.7
  • TI-2014-00604 EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a… CVSS 2.0MEDIUM 6.0
  • TI-2015-05743 The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences