Lucene search

K
cveIcscertCVE-2014-9193
HistoryDec 20, 2014 - 12:59 a.m.

CVE-2014-9193

2014-12-2000:59:03
CWE-264
icscert
web.nvd.nist.gov
27
cve-2014-9193
innominate mguard
firmware
remote access
root privileges
security vulnerability

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

60.3%

Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.

Affected configurations

Nvd
Node
innominatemguard_firmwareRange7.6.6
OR
innominatemguard_firmwareMatch8.0.0
OR
innominatemguard_firmwareMatch8.0.1
OR
innominatemguard_firmwareMatch8.0.2
OR
innominatemguard_firmwareMatch8.0.3
OR
innominatemguard_firmwareMatch8.1.1
OR
innominatemguard_firmwareMatch8.1.2
OR
innominatemguard_firmwareMatch8.1.3
VendorProductVersionCPE
innominatemguard_firmware*cpe:2.3:o:innominate:mguard_firmware:*:*:*:*:*:*:*:*
innominatemguard_firmware8.0.0cpe:2.3:o:innominate:mguard_firmware:8.0.0:*:*:*:*:*:*:*
innominatemguard_firmware8.0.1cpe:2.3:o:innominate:mguard_firmware:8.0.1:*:*:*:*:*:*:*
innominatemguard_firmware8.0.2cpe:2.3:o:innominate:mguard_firmware:8.0.2:*:*:*:*:*:*:*
innominatemguard_firmware8.0.3cpe:2.3:o:innominate:mguard_firmware:8.0.3:*:*:*:*:*:*:*
innominatemguard_firmware8.1.1cpe:2.3:o:innominate:mguard_firmware:8.1.1:*:*:*:*:*:*:*
innominatemguard_firmware8.1.2cpe:2.3:o:innominate:mguard_firmware:8.1.2:*:*:*:*:*:*:*
innominatemguard_firmware8.1.3cpe:2.3:o:innominate:mguard_firmware:8.1.3:*:*:*:*:*:*:*

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

60.3%

Related for CVE-2014-9193