VulnerabilityModified
CVE-2009-0043
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
HIGH 10.0EPSS 53.3%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 53.3%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 53.30% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ca/service level management · ca/service metric analysis
- Source
- cve@mitre.org
References
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspxVendor Advisory
- http://securityreason.com/securityalert/4887
- http://www.securityfocus.com/archive/1/499857/100/0/threaded
- http://www.securityfocus.com/bid/33161Patch
- http://www.vupen.com/english/advisories/2009/0053
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148Patch
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspxVendor Advisory
- http://securityreason.com/securityalert/4887
- http://www.securityfocus.com/archive/1/499857/100/0/threaded
- http://www.securityfocus.com/bid/33161Patch
- http://www.vupen.com/english/advisories/2009/0053
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.