CVE-2013-0936

Cross-site scripting XSS vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a...

CVE-2013-0935

EMC Smarts Network Configuration Manager NCM before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-0935

EMC Smarts Network Configuration Manager (NCM) before version 9.2 is affected by CVE-2013-0935. The issue: Java RMI method calls can be invoked without authentication, allowing remote attackers to execute arbitrary code. Severity in NVD is high (CVSSv2 base score 9.3) with network access and no a...

CVE-2013-0936

CVE-2013-0936 is an XSS vulnerability in EMC Smarts products (IP Manager, Service Assurance Manager, Server Manager, VoIP Availability Manager, Network Protocol Manager, and MPLS Manager) prior to version 9.2. A crafted URL can inject arbitrary web script/HTML, impacting authenticated users. The ...

PT-2013-2729

Name of the Vulnerable Software and Affected Versions EMC Smarts Network Configuration Manager NCM versions prior to 9.2 Description The issue allows remote attackers to execute arbitrary code due to a lack of authentication for Java RMI method calls. Recommendations For versions prior to 9.2,...

PT-2013-3886

Name of the Vulnerable Software and Affected Versions EMC Smarts Network Configuration Manager NCM versions prior to 9.3 Description The issue involves multiple unspecified vulnerabilities in the System Management Console of EMC Smarts Network Configuration Manager. These vulnerabilities have...

PT-2013-2730

Name of the Vulnerable Software and Affected Versions EMC Smarts IP Manager versions prior to 9.2 EMC Smarts Service Assurance Manager versions prior to 9.2 EMC Smarts Server Manager versions prior to 9.2 EMC Smarts VoIP Availability Manager versions prior to 9.2 EMC Smarts Network Protocol Manag...

CVE-2013-0935: Improper Authentication

EMC Smarts Network Configuration Manager NCM before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-2717: Undefined Security Weakness

Multiple unspecified vulnerabilities in the System Management aka SysAdmin Console in EMC Smarts Network Configuration Manager NCM through 9.2 have unknown impact and attack vectors, a different issue than CVE-2013-0935. NOTE: this might overlap CVEs for open-source server components or other...

CVE-2013-0936: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a...

EMC AlphaStor Device Manager Format String (CVE-2013-0929)

A denial of service or executing arbitrary commands has been reported in EMC AlphaStor Device. The vulnerability is caused by insufficient sanitization when processing certain requests. A remote attacker could trigger this flaw by processing certain requests...

CVE-2013-0931

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration...

Design/Logic Flaw

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration...

CVE-2013-0931

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration...

CVE-2013-0931

CVE-2013-0931 affects EMC RSA Authentication Agent for Windows 7.1.x prior to 7.1.2. The Quick PIN Unlock timeout is not enforced, allowing a physically proximate attacker to bypass the passcode on a screensaved session by entering a PIN after timeout. The issue is documented by multiple sources ...

CVE-2013-0931: Undefined Security Weakness

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration...

PT-2013-2725

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent version 7.1.x before 7.1.2 on Windows Description The issue allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration, due to the...

ESA-2013-012: RSA® Authentication Agent 7.1.1 for Microsoft Windows® Access Control Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-012: RSA® Authentication Agent 7.1.1 for Microsoft Windows® Access Control Vulnerability EMC Identifier: ESA-2013-012 CVE Identifier: CVE-2013-0931 Severity Rating: CVSS v2 Base Score: 6.0 AV:N/AC:M/Au:S/C:P/I:P/A:P Affected Products: Product...

EMC Data Protection Advisor CXML Service Detection

The CXML service for EMC Data Protection Advisor, an automated analysis and alerting system for backup and replication infrastructure, was detected on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

EMC Data Protection Advisor Web UI Detection

The report web server is the Web UI for EMC Data Protection Advisor, an automated analysis and alerting system for backup and replication infrastructure. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64702; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25";...