CVE-2012-4614

critical

Description

The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session.

References

http://www.securitytracker.com/id?1027812

http://www.securityfocus.com/bid/56682

http://secunia.com/advisories/51408

http://osvdb.org/87877

http://archives.neohapsis.com/archives/bugtraq/2012-11/0095.html

Details

Source: Mitre, NVD

Published: 2012-11-27

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00578