Auth bypass in Emc Smarts Network Configuration Manager
CVE-2013-0935
EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors.
Vulnerability class: Broken Authentication
EPSS: 0.041 (89.8th percentile) — read the EPSS interpretation.
Affected products
- Emc Smarts_network_configuration_manager
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)