Cogent DataHub Code Injection Vulnerability

ics🔗 www.cisa.gov👁 37 Views

Cogent DataHub code injection vulnerability in versions 7.3.8 and earlier allows remote code execution, denial of service, and information disclosure

Reporter	Title	Published	Views	Family All 14
zdt	Cogent DataHub Command Injection Exploit	27 Jun 201400:00	–	zdt
Circl	CVE-2014-3789	25 Jun 201400:00	–	circl
Check Point Advisories	Cogent DataHub Web Server GetPermissions.asp Command Injection (CVE-2014-3789)	25 Jun 201400:00	–	checkpoint_advisories
CVE	CVE-2014-3789	22 May 201423:00	–	cve
Cvelist	CVE-2014-3789	22 May 201423:00	–	cvelist
Exploit DB	Cogent DataHub - Command Injection (Metasploit)	25 Jun 201400:00	–	exploitdb
ICS	Cogent DataHub Code Injection Vulnerability	19 Apr 201406:00	–	ics
Metasploit	Cogent DataHub Command Injection	29 Apr 201400:00	–	metasploit
NVD	CVE-2014-3789	22 May 201423:55	–	nvd
Packet Storm	Cogent DataHub Command Injection	25 Jun 201400:00	–	packetstorm

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2015/icsa-15-246-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-15-246-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

06 Jun 2015 06:00Current

7.3High risk

Vulners AI Score7.3

CVSS 27.5

EPSS0.64191