Lucene search

K
cve[email protected]CVE-2014-0604
HistoryFeb 06, 2015 - 11:59 a.m.

CVE-2014-0604

2015-02-0611:59:01
CWE-22
web.nvd.nist.gov
14
cve-2014-0604
directory traversal
rftpcom.dll
activex
attachmate reflection ftp client
remote code execution
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.495 Medium

EPSS

Percentile

97.5%

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.

Affected configurations

NVD
Node
attachmatereflection_ftp_clientRange14.1.420

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.495 Medium

EPSS

Percentile

97.5%

Related for CVE-2014-0604