CVE-2012-4614 The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact....
HighCVSS 9.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc it operations intelligence | <= 9.0 | No fix listed |
References
- 20121126 ESA-2012-057: EMC Smarts Network Configuration Manager Multiple Vulnerabilities mailing-list
- 87877 vdb-entry
- 51408 third-party-advisory
- 56682 vdb-entry
- 1027812 vdb-entry