The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall which allows remote attackers to obtain potentially sensitive information about open ports or cause a denial of service by sending packets to many ports.