CVE-2017-2768: Critical severity EMC Smarts Network Configuration Manager vulnerability

Published Feb 3, 2017

Updated

EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains an Improper Authentication vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Affected Software

4 affected components

EMC Smarts Network Configuration Manager=9.3

EMC Smarts Network Configuration Manager=9.4

EMC Smarts Network Configuration Manager=9.4.1

EMC Smarts Network Configuration Manager=9.4.2

Event History

Feb 3, 2017

CVE Published

via MITRE·07:24 AM

Data Sourced

via MITRE·07:24 AM

DescriptionWeakness

Data Sourced

via NVD·07:59 AM

DescriptionSeverityWeaknessAffected Software

Dec 11, 58332

Event

08:50 PM

Frequently Asked Questions

What is the severity of CVE-2017-2768?

CVE-2017-2768 is classified as having a medium severity level.

How do I fix CVE-2017-2768?

To fix CVE-2017-2768, upgrade to the latest version of EMC Network Configuration Manager that addresses the authentication vulnerability.

What versions of EMC Network Configuration Manager are affected by CVE-2017-2768?

The affected versions of EMC Network Configuration Manager are 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x.

What type of vulnerability is CVE-2017-2768?

CVE-2017-2768 is classified as an Improper Authentication vulnerability.

Can CVE-2017-2768 be exploited remotely?

Yes, CVE-2017-2768 can potentially be exploited by malicious users to gain unauthorized access.