CVE-2017-4976

CVE-2017-4976 describes a critical vulnerability in EMC ESRS Policy Manager versions prior to 6.8, stemming from an undocumented account with a default password. A remote attacker can exploit this by logging in with the known default credentials, gaining full administrator privileges to the local LDAP directory server. This flaw carries a CVSS score of 9.8 (CRITICAL) due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been confirmed, the vulnerability has garnered some community discussion and media coverage.