CVE-2012-4614

EMC Smarts NCM <9.1 - Info Disclosure

Title source: llm

Description

The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session.

References (5)

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html

[Third Party Advisory, VDB Entry] http://osvdb.org/87877

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/56682

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1027812

[Third Party Advisory] http://secunia.com/advisories/51408

Scores

EPSS 0.0058

EPSS Percentile 68.5%

Classification

CWE

CWE-287

Status draft

Affected Products (1)

emc/it_operations_intelligence < 9.0

Timeline

Published Nov 27, 2012

Tracked Since Feb 18, 2026