CVE-2013-0935

EPSS 1.79%
Published 28.03.2013 15:55:01
Last modified 11.04.2025 00:51:21
Source security_alert@emc.com
Teams watchlist Login
Open Login

EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Emc ≫ Smarts Network Configuration Manager Version <= 9.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.79%	0.811

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://archives.neohapsis.com/archives/bugtraq/2013-03/0135.html

https://nvd.nist.gov/vuln/detail/CVE-2013-0935

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-0935

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-0935

EUVD