CVE-2017-2767: Critical severity EMC Smarts Network Configuration Manager vulnerability

Published Feb 3, 2017

Updated

EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains a Java RMI Remote Code Execution vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Affected Software

4 affected components

EMC Smarts Network Configuration Manager=9.3

EMC Smarts Network Configuration Manager=9.4

EMC Smarts Network Configuration Manager=9.4.1

EMC Smarts Network Configuration Manager=9.4.2

Event History

Feb 3, 2017

CVE Published

via MITRE·07:24 AM

Data Sourced

via MITRE·07:24 AM

DescriptionWeakness

Data Sourced

via NVD·07:59 AM

DescriptionSeverityWeaknessAffected Software

Dec 11, 58332

Event

11:12 PM

Frequently Asked Questions

What is the severity of CVE-2017-2767?

CVE-2017-2767 is rated as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2017-2767?

To fix CVE-2017-2767, upgrade to EMC Network Configuration Manager versions that are not affected, such as version 9.4.2 or later.

What versions of EMC Network Configuration Manager are affected by CVE-2017-2767?

CVE-2017-2767 affects EMC Network Configuration Manager versions 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x.

What type of vulnerability is CVE-2017-2767?

CVE-2017-2767 is a Java RMI Remote Code Execution vulnerability.

Can CVE-2017-2767 be exploited remotely?

Yes, CVE-2017-2767 can be exploited remotely by malicious users.