Authentication flaw

The default configuration of EMC Smarts Network Configuration Manager NCM before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session...

CVE-2012-4615

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...

Hardcoded credentials

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2012-4614

The default configuration of EMC Smarts Network Configuration Manager NCM before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session...

CVE-2012-4614

CVE-2012-4614 affects EMC Smarts Network Configuration Manager (NCM) prior to version 9.1. The default NCM configuration allows unauthenticated access to the NCM database, enabling remote attackers to interact via the network (impact described as complete confidentiality/integrity/availability). ...

CVE-2012-4615

EMC Smarts Network Configuration Manager (NCM) prior to version 9.1 is affected by CVE-2012-4615 due to a hard-coded encryption key used to store credentials, enabling local users to obtain sensitive information via unspecified vectors. The related security advisory(ESA-2012-057) notes this and r...

CVE-2012-4614

The default configuration of EMC Smarts Network Configuration Manager NCM before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session...

CVE-2012-4615

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2012-4615: Undefined Security Weakness

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2012-4614: Improper Authentication

The default configuration of EMC Smarts Network Configuration Manager NCM before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session...

EMC SMARTS Application Server Detection

Binary data emcsmartsdetect.nbin...

Multiple Cisco Products brstart sm_read_string_length Remote Code Execution

Binary data ciscousmlmsbof.nbin...

Cisco Unified Service Monitor brstart add_dm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Unified Service Monitor due to bundled EMC SMARTS application server. Authentication is not required to exploit this vulnerability. The flaw exists within the brstart.exe service which listen...

Cisco Unified Service Monitor brstart sm_read_string_length Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Unified Service Monitor due to bundled EMC SMARTS application server. Authentication is not required to exploit this vulnerability. The flaw exists within the brstart.exe service which listen...