Lucene search

K
cve[email protected]CVE-2014-3788
HistoryMay 22, 2014 - 11:55 p.m.

CVE-2014-3788

2014-05-2223:55:03
CWE-119
web.nvd.nist.gov
22
cve-2014-3788
buffer overflow
web server
cogent datahub
remote code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.371 Low

EPSS

Percentile

97.2%

Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary code via a negative value in the Content-Length field in a request.

Affected configurations

NVD
Node
cogentdatahubcogent_datahubRange7.3.4
OR
cogentdatahubcogent_datahubMatch7.0
OR
cogentdatahubcogent_datahubMatch7.0.2
OR
cogentdatahubcogent_datahubMatch7.1.0
OR
cogentdatahubcogent_datahubMatch7.1.1
OR
cogentdatahubcogent_datahubMatch7.1.1.63
OR
cogentdatahubcogent_datahubMatch7.1.2
OR
cogentdatahubcogent_datahubMatch7.2.2
OR
cogentdatahubcogent_datahubMatch7.3.0
OR
cogentdatahubcogent_datahubMatch7.3.1
OR
cogentdatahubcogent_datahubMatch7.3.2
OR
cogentdatahubcogent_datahubMatch7.3.3

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.371 Low

EPSS

Percentile

97.2%

Related for CVE-2014-3788