CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 10.0. It affects Windows. Its EPSS score suggests a 12.2% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2008-3703
Severity
HIGH
CVSS
10
EPSS
12.25%
Windows
Original NVD Description
The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create "snapshots schedules" registry values specifying future command execution. NOTE: this issue exists because of an incomplete fix for CVE-2007-2279.