EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors.
http://archives.neohapsis.com/archives/bugtraq/2013-03/0135.html