CVE-2014-5070

HIGH

8.8

Descricao

Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenticated users to the login page.

Detalhes CVE

Pontuacao CVSS v3.18.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado1/11/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

microsemi:s350imicrosemi:s350i_firmware

Fraquezas (CWE)

CWE-264

Referencias

https://www.portcullis.co.uk/security-research-and-downloads/security-advisories/cve-2014-5070/(cve@mitre.org)

https://www.portcullis.co.uk/security-research-and-downloads/security-advisories/cve-2014-5070/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.