Vulnerability Description
EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score
9.3
HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emc | Smarts Network Configuration Manager | <= 9.1 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/bugtraq/2013-03/0135.html
- http://archives.neohapsis.com/archives/bugtraq/2013-03/0135.html
FAQ
What is CVE-2013-0935?
CVE-2013-0935 is a vulnerability with a CVSS score of 9.3 (HIGH). EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors...
How severe is CVE-2013-0935?
CVE-2013-0935 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-0935?
Check the references section above for vendor advisories and patch information. Affected products include: Emc Smarts Network Configuration Manager.