CVE-2013-0935: Critical severity emc smarts network configuration manager vulnerability
Published Mar 28, 2013
·Updated
EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
1 affected component
EMC Smarts Network Configuration Manager<=9.1
Event History
Mar 28, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0935?
CVE-2013-0935 is considered critical due to the potential for remote code execution by unauthenticated attackers.
2
How do I fix CVE-2013-0935?
To fix CVE-2013-0935, upgrade to EMC Smarts Network Configuration Manager version 9.2 or later.
3
Which versions of EMC Smarts Network Configuration Manager are affected by CVE-2013-0935?
CVE-2013-0935 affects EMC Smarts Network Configuration Manager versions prior to 9.2.
4
What types of attacks can be executed through CVE-2013-0935?
CVE-2013-0935 allows remote attackers to execute arbitrary code on the affected systems.
5
Is authentication required for Java RMI method calls in CVE-2013-0935?
CVE-2013-0935 indicates that authentication is not required, making the application vulnerable.