CVE-2016-0917 (vnx1_oe_firmware, vnx2_oe_firmware, vnxe_oe_firmware)

CVE-2016-0917 (vnx1_oe_firmware, vnx2_oe_firmware, vnxe_oe_firmware)

The SMB service in EMC VNXe, VNX1 File OE before 7.1.80.3, and VNX2 File OE before 8.1.9.155 does not prevent duplicate NTLM challenge-response nonces, which makes it easier for remote attackers to execute arbitrary code, or read or write to files, via a series of authentication requests, a related issue to CVE-2010-0231.

Source: CVE-2016-0917 (vnx1_oe_firmware, vnx2_oe_firmware, vnxe_oe_firmware)

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다