CVE-2014-1706

2014-03-1614:06:45

[email protected]

web.nvd.nist.gov

cve-2014-1706

crosh

google chrome os

vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.2%

JSON

crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors.

Affected configurations

NVD

Node

googlechrome_osRange≤33.0.1750.149

googlechrome_osMatch33.0.1750.2

googlechrome_osMatch33.0.1750.5

googlechrome_osMatch33.0.1750.16

googlechrome_osMatch33.0.1750.29

googlechrome_osMatch33.0.1750.51

googlechrome_osMatch33.0.1750.58

googlechrome_osMatch33.0.1750.70

googlechrome_osMatch33.0.1750.93

googlechrome_osMatch33.0.1750.112

googlechrome_osMatch33.0.1750.124

CPENameOperatorVersion
google:chrome_osgoogle chrome osle33.0.1750.149
google:chrome_osgoogle chrome oseq33.0.1750.2
google:chrome_osgoogle chrome oseq33.0.1750.5
google:chrome_osgoogle chrome oseq33.0.1750.16
google:chrome_osgoogle chrome oseq33.0.1750.29
google:chrome_osgoogle chrome oseq33.0.1750.51
google:chrome_osgoogle chrome oseq33.0.1750.58
google:chrome_osgoogle chrome oseq33.0.1750.70
google:chrome_osgoogle chrome oseq33.0.1750.93
google:chrome_osgoogle chrome oseq33.0.1750.112

CPE	Name	Operator	Version
google:chrome_os	google chrome os	le	33.0.1750.149
google:chrome_os	google chrome os	eq	33.0.1750.2
google:chrome_os	google chrome os	eq	33.0.1750.5
google:chrome_os	google chrome os	eq	33.0.1750.16
google:chrome_os	google chrome os	eq	33.0.1750.29
google:chrome_os	google chrome os	eq	33.0.1750.51
google:chrome_os	google chrome os	eq	33.0.1750.58
google:chrome_os	google chrome os	eq	33.0.1750.70
google:chrome_os	google chrome os	eq	33.0.1750.93
google:chrome_os	google chrome os	eq	33.0.1750.112