CVE-2014-3139

CVE-2014-3139 affects Unitrends Enterprise Backup 7.3.0, where recoveryconsole/bpl/snmpd.php allows remote authentication bypass by sending the auth parameter as a certain string. This is a remote, unauthenticated bypass with potential partial confidentiality, integrity, and availability impact a...

CVE-2014-3139: Improper Authentication

recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string...

CVE-2014-3008

Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php...

CVE-2014-3008: Improper Neutralization of Special Elements used in an OS Command

Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php...