CVE-2014-5073

2014-08-2917:00:00

[email protected]

web.nvd.nist.gov

cve-2014-5073

vmtadmin.cgi

vmturbo operations manager

remote execution

shell metacharacters

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.916 High

EPSS

Percentile

98.9%

JSON

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.

Affected configurations

NVD

Node

vmturbooperations_managerRange≤4.6

vmturbooperations_managerMatch4.0

vmturbooperations_managerMatch4.5-

vmturbooperations_managerMatch4.51

CPENameOperatorVersion
vmturbo:operations_managervmturbo operations managerle4.6
vmturbo:operations_managervmturbo operations managereq4.0
vmturbo:operations_managervmturbo operations managereq4.5

CPE	Name	Operator	Version
vmturbo:operations_manager	vmturbo operations manager	le	4.6
vmturbo:operations_manager	vmturbo operations manager	eq	4.0
vmturbo:operations_manager	vmturbo operations manager	eq	4.5