Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9
CVSSv2

CVE-2014-5502

Published: 07/10/2014 Updated: 08/10/2014
CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8
VMScore: 801
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Subscribe to Cyberoam

Vulnerability Summary

The Sophos Cyberoam appliances with CyberoamOS prior to 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete, or (4) ccc_flush_sql_file opcode.

Vulnerable Product Search on Vulmon Subscribe to Product

cyberoam cyberoam os

References

CWE-78http://www.zerodayinitiative.com/advisories/ZDI-14-332/http://kb.cyberoam.com/default.asp?id=3049http://www.zerodayinitiative.com/advisories/ZDI-14-328/http://www.zerodayinitiative.com/advisories/ZDI-14-331/http://www.zerodayinitiative.com/advisories/ZDI-14-333/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4651CVE-2024-34255elevation of privilegeCVE-2024-25529CVE-2024-4671NULL pointer dereferenceCVE-2024-25527template injectionCVE-2008-0166
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook