Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-8329
schrack technik
microcontrol
firmware
access control
sensitive information
remote attackers
nvd
cve-2014-8329
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.4%
Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain access data for the ftp and telnet services via a direct request for ZTPUsrDtls.txt.
Affected configurations
Node
schracktechnik_microcontrol_firmwareRange≤1.7.0
schracktechnik_microcontrolMatch-
Related
prion
prion
Improper access control
2014-10-20 15:55:00
cvelist
cvelist
CVE-2014-8329
2022-10-03 16:20:37
nvd
nvd
CVE-2014-8329
2014-10-20 15:55:05
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.4%
Related for CVE-2014-8329