CVE-2014-1671

2014-01-2601:55:20

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-1671

sql injection

dell kace k1000

nvd

security vulnerability

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

JSON

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a (1) getUploadPath or (2) getKBot SOAP request to service/kbot_service.php; the ID parameter to (3) userui/advisory_detail.php or (4) userui/ticket.php; and the (5) ORDER[] parameter to userui/ticket_list.php.

Affected configurations

NVD

Node

dellkace_k1000_systems_management_appliance_softwareMatch5.4.76847

dellkace_k1000_systems_management_virtual_applianceMatch-

dellkace_k1000_systems_management_applianceMatch-

dellkace_k1100s_systems_management_applianceMatch-

dellkace_k1200s_systems_management_applianceMatch-

CPENameOperatorVersion
dell:kace_k1000_systems_management_appliance_softwaredell kace k1000 systems management appliance softwareeq5.4.76847
dell:kace_k1000_systems_management_virtual_appliancedell kace k1000 systems management virtual applianceeq-
dell:kace_k1000_systems_management_appliancedell kace k1000 systems management applianceeq-
dell:kace_k1100s_systems_management_appliancedell kace k1100s systems management applianceeq-
dell:kace_k1200s_systems_management_appliancedell kace k1200s systems management applianceeq-

CPE	Name	Operator	Version
dell:kace_k1000_systems_management_appliance_software	dell kace k1000 systems management appliance software	eq	5.4.76847
dell:kace_k1000_systems_management_virtual_appliance	dell kace k1000 systems management virtual appliance	eq	-
dell:kace_k1000_systems_management_appliance	dell kace k1000 systems management appliance	eq	-
dell:kace_k1100s_systems_management_appliance	dell kace k1100s systems management appliance	eq	-
dell:kace_k1200s_systems_management_appliance	dell kace k1200s systems management appliance	eq	-