PT-2012-5518 · Emc · Emc Smarts Network Configuration Manager

Published 2012-11-27 · Updated 2013-08-17 · CVE-2012-4614

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Smarts Network Configuration Manager versions prior to 9.1

Description The default configuration of the software does not require authentication for database access, allowing remote attackers to have an unspecified impact via a network session.

Recommendations For versions prior to 9.1, update to version 9.1 or later to require authentication for database access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-4614

Affected Products

Emc Smarts Network Configuration Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-4614 · Security Note
• http://securitytracker.com/id?1027812 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html · Note
• http://securityfocus.com/bid/56682 · Note
• http://osvdb.org/87877 · Note
• http://secunia.com/advisories/51408 · Note