Lucene search
HistoryApr 11, 2014 - 7:55 p.m.
CVE-2014-1209
cve-2014-1209
vmware vsphere
client 4.0
client 4.1
client 5.0
client 5.1
remote code execution
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.6%
VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors.
Affected configurations
Node
vmwarevsphere_clientMatch4.0
ORvmwarevsphere_clientMatch4.1
ORvmwarevsphere_clientMatch5.0
ORvmwarevsphere_clientMatch5.1
Related
cvelist
cvelist
CVE-2014-1209
2014-04-11 19:00:00
nvd
nvd
CVE-2014-1209
2014-04-11 19:55:04
nessus
nessus
VMware ESX / ESXi vSphere Client RCE (VMSA-2014-0003)
2015-12-30 00:00:00
VMware vSphere Client Multiple Vulnerabilities (VMSA-2014-0003)
2014-04-17 00:00:00
seebug
seebug
vSphere Clientδ»»ζζδ»ΆδΈθ½½ζΌζ΄
2014-04-15 00:00:00
prion
prion
Design/Logic Flaw
2014-04-11 19:55:00
openvas
openvas
kaspersky
kaspersky
KLA10436 Multiple vulnerabilities in VMware vSphere Client
2014-04-10 00:00:00
vmware
vmware
VMware vSphere Client updates address security vulnerabilities
2014-04-10 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.6%
Related for CVE-2014-1209