CVE-2018-1237

CVE-2018-1237 describes an improper restriction of excessive authentication attempts vulnerability in Dell EMC ScaleIO versions prior to 2.5, specifically impacting the Light Installation Agent (LIA) component. This flaw allows a remote attacker with network access to the LIA to conduct brute-force attacks against user accounts. Rated as Critical with a CVSS score of 9.8, the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.