Lucene search

K
nvd[email protected]NVD:CVE-2014-3008
HistoryApr 28, 2014 - 2:09 p.m.

CVE-2014-3008

2014-04-2814:09:08
CWE-78
web.nvd.nist.gov
1

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0.018

Percentile

88.2%

Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php.

Affected configurations

Nvd
Node
unitrendsenterprise_backupMatch7.3.0
VendorProductVersionCPE
unitrendsenterprise_backup7.3.0cpe:2.3:a:unitrends:enterprise_backup:7.3.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0.018

Percentile

88.2%

Related for NVD:CVE-2014-3008