Lucene search
HistoryJul 26, 2014 - 3:55 p.m.
CVE-2014-2626
hp network virtualization
cve-2014-2626
directory traversal
remote code execution
security vulnerability
nvd
zdi-can-2024
9.4 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:C/A:N
7.3 High
AI Score
Confidence
Low
0.86 High
EPSS
Percentile
98.6%
Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024.
Affected configurations
Node
hpnetwork_virtualizationMatch8.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:network_virtualization | hp network virtualization | eq | 8.6 |
Related
zdi
zdi
prion
prion
Directory traversal
2014-07-26 15:55:00
nvd
nvd
CVE-2014-2626
2014-07-26 15:55:03
checkpoint_advisories
checkpoint_advisories
HP Network Virtualization toServerObject Directory Traversal (CVE-2014-2626)
2014-09-21 00:00:00
attackerkb
attackerkb
cvelist
cvelist
CVE-2014-2626
2014-07-26 15:00:00
securityvulns
securityvulns
9.4 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:C/A:N
7.3 High
AI Score
Confidence
Low
0.86 High
EPSS
Percentile
98.6%
Related for CVE-2014-2626