Lucene search

MitreCVE-2014-3459

HistoryAug 07, 2014 - 11:13 a.m.

CVE-2014-3459

2014-08-0711:13:34

CWE-119

mitre

web.nvd.nist.gov

cve-2014-3459

solarwinds

ncm

buffer overflow

remote code execution

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

High

EPSS

0.592

Percentile

97.8%

JSON

Heap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property.

Affected configurations

Nvd

Node

solarwindsnetwork_configuration_managerRange≤7.2.2

solarwindsnetwork_configuration_managerMatch7.2.0

solarwindsnetwork_configuration_managerMatch7.2.1

VendorProductVersionCPE
solarwindsnetwork_configuration_manager*cpe:2.3:a:solarwinds:network_configuration_manager:*:*:*:*:*:*:*:*
solarwindsnetwork_configuration_manager7.2.0cpe:2.3:a:solarwinds:network_configuration_manager:7.2.0:*:*:*:*:*:*:*
solarwindsnetwork_configuration_manager7.2.1cpe:2.3:a:solarwinds:network_configuration_manager:7.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
solarwinds	network_configuration_manager	*	cpe:2.3:a:solarwinds:network_configuration_manager::::::::
solarwinds	network_configuration_manager	7.2.0	cpe:2.3:a:solarwinds:network_configuration_manager:7.2.0:::::::*
solarwinds	network_configuration_manager	7.2.1	cpe:2.3:a:solarwinds:network_configuration_manager:7.2.1:::::::*

References

zerodayinitiative.com/advisories/ZDI-14-133/

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

High

EPSS

0.592

Percentile

97.8%

JSON

Related for CVE-2014-3459