Lucene search
CertccCVE-2014-2967HistoryJul 07, 2014 - 11:01 a.m.
CVE-2014-2967
2014-07-0711:01:29
CWE-78
certcc
web.nvd.nist.gov
35
cve-2014-2967
autodesk vred
professional 2014
remote code execution
python os library
web server
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.1
Confidence
Low
EPSS
0.008
Percentile
82.1%
Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.
Affected configurations
Node
autodeskvredMatch2014professional
References
Related
nessus
nessus
Autodesk VRED Python API Remote Code Execution
2014-07-24 00:00:00
Autodesk VRED Pro 2014 < SR1 SP8 Remote Code Execution
2014-07-24 00:00:00
cvelist
cvelist
CVE-2014-2967
2014-07-07 10:00:00
cert
cert
nvd
nvd
CVE-2014-2967
2014-07-07 11:01:29
prion
prion
Design/Logic Flaw
2014-07-07 11:01:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.1
Confidence
Low
EPSS
0.008
Percentile
82.1%
Related for CVE-2014-2967