Lucene search

K
kasperskyKaspersky LabKLA10149
HistoryJun 04, 2014 - 12:00 a.m.

KLA10149 ACE vulnerability in Ericom

2014-06-0400:00:00
Kaspersky Lab
threats.kaspersky.com
12

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.895 High

EPSS

Percentile

98.8%

A buffer overflow was found in Ericom products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request.

Original advisories

Ericom bulletin

Exploitation

Public exploits exist for this vulnerability.

Related products

Ericom-Blaze

CVE list

CVE-2014-3913 critical

Solution

Update to latest version

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

  • Ericom AccessNow Server versions 3.3 and earlierEricom BlazeΒ versions 3.3 and earlier

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.895 High

EPSS

Percentile

98.8%