Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-2276
HistoryMar 21, 2014 - 2:55 p.m.

Design/Logic Flaw

2014-03-2114:55:00
PRIOn knowledge base
www.prio-n.com
3

6.6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.946 High

EPSS

Percentile

99.2%

The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file.

CPENameOperatorVersion
connectrix_managerle12.1.2

6.6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.946 High

EPSS

Percentile

99.2%