9

CVE-2014-9193

Innominate mGuard Improper Privilege Management

Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Innominate ≫ Mguard Firmware Version <= 7.6.6
Innominate ≫ Mguard Firmware Version8.0.0
Innominate ≫ Mguard Firmware Version8.0.1
Innominate ≫ Mguard Firmware Version8.0.2
Innominate ≫ Mguard Firmware Version8.0.3
Innominate ≫ Mguard Firmware Version8.1.1
Innominate ≫ Mguard Firmware Version8.1.2
Innominate ≫ Mguard Firmware Version8.1.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.14% 0.862
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
ics-cert@hq.dhs.gov 8.5 6.8 10
AV:N/AC:M/Au:S/C:C/I:C/A:C
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://www.innominate.com/data/downloads/software/innominate_security_advisory_20141217_001_en.pdf
Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-14-352-02
Third Party Advisory
US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-14-352-02