CVE-2014-2084

2014-05-1719:55:03

CWE-264

mitre

web.nvd.nist.gov

cve-2014-2084

skybox view appliances

iso

access restriction

remote attack

denial of service

sensitive information disclosure

nvd

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

AI Score

6.5

Confidence

Low

EPSS

0.112

Percentile

95.3%

JSON

Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to obtain sensitive information via a request to (1) scripts/commands/getSystemInformation or (2) scripts/commands/getNetworkConfigurationInfo, cause a denial of service (reboot) via a request to scripts/commands/reboot, or cause a denial of service (shutdown) via a request to scripts/commands/shutdown.

Affected configurations

Nvd

Node

skyboxsecurityskybox_view_appliance_isoMatch6.3.31-2.14

skyboxsecurityskybox_view_appliance_isoMatch6.3.33-2.14

skyboxsecurityskybox_view_appliance_isoMatch6.4.42-2.54

skyboxsecurityskybox_view_appliance_isoMatch6.4.45-2.56

skyboxsecurityskybox_view_appliance_isoMatch6.4.46-2.57

AND

skyboxsecurityskybox_view_applianceMatch-

VendorProductVersionCPE
skyboxsecurityskybox_view_appliance_iso6.3.31-2.14cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.3.31-2.14:*:*:*:*:*:*:*
skyboxsecurityskybox_view_appliance_iso6.3.33-2.14cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.3.33-2.14:*:*:*:*:*:*:*
skyboxsecurityskybox_view_appliance_iso6.4.42-2.54cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.4.42-2.54:*:*:*:*:*:*:*
skyboxsecurityskybox_view_appliance_iso6.4.45-2.56cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.4.45-2.56:*:*:*:*:*:*:*
skyboxsecurityskybox_view_appliance_iso6.4.46-2.57cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.4.46-2.57:*:*:*:*:*:*:*
skyboxsecurityskybox_view_appliance-cpe:2.3:h:skyboxsecurity:skybox_view_appliance:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
skyboxsecurity	skybox_view_appliance_iso	6.3.31-2.14	cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.3.31-2.14:::::::*
skyboxsecurity	skybox_view_appliance_iso	6.3.33-2.14	cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.3.33-2.14:::::::*
skyboxsecurity	skybox_view_appliance_iso	6.4.42-2.54	cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.4.42-2.54:::::::*
skyboxsecurity	skybox_view_appliance_iso	6.4.45-2.56	cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.4.45-2.56:::::::*
skyboxsecurity	skybox_view_appliance_iso	6.4.46-2.57	cpe:2.3:a:skyboxsecurity:skybox_view_appliance_iso:6.4.46-2.57:::::::*
skyboxsecurity	skybox_view_appliance	-	cpe:2.3:h:skyboxsecurity:skybox_view_appliance:-:::::::*