CVE

CVE-2016-0917 (vnx1_oe_firmware, vnx2_oe_firmware, vnxe_oe_firmware)

CVE-2016-0917 (vnx1_oe_firmware, vnx2_oe_firmware, vnxe_oe_firmware)

The SMB service in EMC VNXe, VNX1 File OE before 7.1.80.3, and VNX2 File OE before 8.1.9.155 does not prevent duplicate NTLM challenge-response nonces, which makes it easier for remote attackers to execute arbitrary code, or read or write to files, via a series of authentication requests, a related issue to CVE-2010-0231.

Source: CVE-2016-0917 (vnx1_oe_firmware, vnx2_oe_firmware, vnxe_oe_firmware)

Exit mobile version