CVE-2014-5210

EPSS 14.92%
Veröffentlicht 21.08.2014 14:55:05
Zuletzt bearbeitet 06.05.2026 22:30:45
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 29 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Alienvault ≫ Open Source Security Information Management Version <= 4.6.1

Alienvault ≫ Open Source Security Information Management Version1.0.4

Alienvault ≫ Open Source Security Information Management Version1.0.6

Alienvault ≫ Open Source Security Information Management Version2.1

Alienvault ≫ Open Source Security Information Management Version2.1.2

Alienvault ≫ Open Source Security Information Management Version2.1.5

Alienvault ≫ Open Source Security Information Management Version2.1.5-1

Alienvault ≫ Open Source Security Information Management Version2.1.5-2

Alienvault ≫ Open Source Security Information Management Version2.1.5-3

Alienvault ≫ Open Source Security Information Management Version3.1

Alienvault ≫ Open Source Security Information Management Version3.1.9

Alienvault ≫ Open Source Security Information Management Version3.1.10

Alienvault ≫ Open Source Security Information Management Version3.1.12

Alienvault ≫ Open Source Security Information Management Version4.0

Alienvault ≫ Open Source Security Information Management Version4.0.3

Alienvault ≫ Open Source Security Information Management Version4.0.4

Alienvault ≫ Open Source Security Information Management Version4.1

Alienvault ≫ Open Source Security Information Management Version4.1.2

Alienvault ≫ Open Source Security Information Management Version4.1.3

Alienvault ≫ Open Source Security Information Management Version4.2

Alienvault ≫ Open Source Security Information Management Version4.2.2

Alienvault ≫ Open Source Security Information Management Version4.2.3

Alienvault ≫ Open Source Security Information Management Version4.3

Alienvault ≫ Open Source Security Information Management Version4.3.1

Alienvault ≫ Open Source Security Information Management Version4.3.2

Alienvault ≫ Open Source Security Information Management Version4.3.3

Alienvault ≫ Open Source Security Information Management Version4.4

Alienvault ≫ Open Source Security Information Management Version4.5

Alienvault ≫ Open Source Security Information Management Version4.6

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.92%	0.963

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://forums.alienvault.com/discussion/2690

Vendor Advisory

http://www.securityfocus.com/bid/69239

http://www.zerodayinitiative.com/advisories/ZDI-14-294/

http://www.zerodayinitiative.com/advisories/ZDI-14-295/

https://nvd.nist.gov/vuln/detail/CVE-2014-5210

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-5210

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-5210

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2014-5210