PT-2017-3137 · Emc · Network Configuration Manager

Publicado 2017-02-01 · Atualizado 2017-07-25 · CVE-2017-2768

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Network Configuration Manager (NCM) versions 9.3.x through 9.4.2.x

Description The issue is related to an Improper Authentication vulnerability. This vulnerability could potentially be exploited by malicious users to compromise the affected system. The vulnerability is also associated with deficiencies in the authentication mechanism, which may allow a remote attacker to bypass firewall restrictions using a Zebedee client connecting to a Zebedee server located behind the firewall.

Recommendations For versions 9.3.x through 9.4.2.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2017-02537

CVE-2017-2768

Produtos afetados

Network Configuration Manager

Referências · 6

• https://bdu.fstec.ru/vul/2017-02537 · Nota de Segurança
• http://securitytracker.com/id/1037761 · Nota
• http://securityfocus.com/bid/95936 · Nota
• http://securityfocus.com/archive/1/540085/30/0/threaded · Nota
• https://osv.dev/vulnerability/CVE-2017-2768 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2768 · Nota de Segurança