CVE-2016-0917

Critical

Published: 21/09/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The SMB service in EMC VNXe (including VNXe3200 prior to version 3.1.5.8711957 and VNXe3100/3150/3300 prior to version 2.4.4.22638) and VNX1 and VNX2 File OE before specified versions does not prevent duplicate NTLM challenge-response nonces, making it easier for remote attackers to execute arbitrary code or read/write files.

Risk Assessment

This vulnerability poses a risk to organizations by allowing remote attackers to execute code or manipulate data, potentially leading to serious security breaches.

Recommendation

It is recommended to update systems to the latest versions that address this vulnerability and to monitor authentication logs for potential attack attempts.

Original NVD description (English source)

The SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Environment prior to 2.4.4.22638), VNX1 File OE before 7.1.80.3, VNX2 File OE before 8.1.9.155, and Celerra (all supported versions) does not prevent duplicate NTLM challenge-response nonces, which makes it easier for remote attackers to execute arbitrary code, or read or write to files, via a series of authentication requests, a related issue to CVE-2010-0231.