Lucene search

[email protected]CVE-2014-0633

HistoryApr 01, 2014 - 6:28 a.m.

CVE-2014-0633

2014-04-0106:28:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2014-0633

emc vplex

geosynchrony

session-timeout

remote code execution

nvd

7.8 High

AI Score

Confidence

Low

7.7 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

60.5%

JSON

The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.

CPENameOperatorVersion
emc:vplex_geosynchronyemc vplex geosynchronyeq5.0
emc:vplex_geosynchronyemc vplex geosynchronyeq5.1
emc:vplex_geosynchronyemc vplex geosynchronyeq5.2
emc:vplex_geosynchronyemc vplex geosynchronyeq4.0
emc:vplex_geosynchronyemc vplex geosynchronyeq5.2.1

CPE	Name	Operator	Version
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	5.0
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	5.1
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	5.2
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	4.0
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	5.2.1

References

archives.neohapsis.com/archives/bugtraq/2014-03/0157.html

7.8 High

AI Score

Confidence

Low

7.7 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

60.5%

JSON

Related for CVE-2014-0633

seebug1 prion1 securityvulns2