CVE-2012-4614

Published: Nov 27, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which allows remote attackers to have an unspecified impact via a network session.

Affected (1)

Products: Emc: It Operations Intelligence

Emc

1 product

It Operations Intelligence

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Emc It Operations Intelligence	Up to 9.0

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.