CVEvulnerability
CVE-2017-2768
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-02-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains an Improper Authentication vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Affected configurations
• emc smarts network configuration manager 9.3
• emc smarts network configuration manager 9.4
• emc smarts network configuration manager 9.4.1
• emc smarts network configuration manager 9.4.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.securityfocus.com/archive/1/540085/30/0/threaded Mailing List, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/95936 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037761 www.securitytracker.com
- http://www.securityfocus.com/archive/1/540085/30/0/threaded Mailing List, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/95936 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037761 www.securitytracker.com