EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Authentication Bypass
RCE
Java
Smarts Network Configuration Manager
Emc
NVD
CVSS 2.0
9.3
EPSS
1.8%
Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuration Manager (NCM) through 9.2 have unknown impact and attack vectors, a different. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
Smarts Network Configuration Manager
Emc
NVD
CVSS 2.0
9.3
EPSS
0.4%