9
CVE-2014-9193
- EPSS 0.47%
- Veröffentlicht 20.12.2014 00:59:03
- Zuletzt bearbeitet 28.07.2025 21:15:24
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginInnominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Innominate ≫ Mguard Firmware Version <= 7.6.6
Innominate ≫ Mguard Firmware Version8.0.0
Innominate ≫ Mguard Firmware Version8.0.1
Innominate ≫ Mguard Firmware Version8.0.2
Innominate ≫ Mguard Firmware Version8.0.3
Innominate ≫ Mguard Firmware Version8.1.1
Innominate ≫ Mguard Firmware Version8.1.2
Innominate ≫ Mguard Firmware Version8.1.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.47% | 0.636 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9 | 8 | 10 |
AV:N/AC:L/Au:S/C:C/I:C/A:C
|
| ics-cert@hq.dhs.gov | 8.5 | 6.8 | 10 |
AV:N/AC:M/Au:S/C:C/I:C/A:C
|
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.