Lucene search
MitreCVE-2014-5210HistoryAug 21, 2014 - 2:55 p.m.
CVE-2014-5210
2014-08-2114:55:05
CWE-94
mitre
web.nvd.nist.gov
55
av-centerd
soap service
alienvault ossim
remote attackers
arbitrary commands
cve-2014-5210
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.3
Confidence
Low
EPSS
0.952
Percentile
99.4%
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.
Affected configurations
Node
alienvaultopen_source_security_information_managementRange≤4.6.1
ORalienvaultopen_source_security_information_managementMatch1.0.4
ORalienvaultopen_source_security_information_managementMatch1.0.6
ORalienvaultopen_source_security_information_managementMatch2.1
ORalienvaultopen_source_security_information_managementMatch2.1.2
ORalienvaultopen_source_security_information_managementMatch2.1.5
ORalienvaultopen_source_security_information_managementMatch2.1.5-1
ORalienvaultopen_source_security_information_managementMatch2.1.5-2
ORalienvaultopen_source_security_information_managementMatch2.1.5-3
ORalienvaultopen_source_security_information_managementMatch3.1
ORalienvaultopen_source_security_information_managementMatch3.1.9
ORalienvaultopen_source_security_information_managementMatch3.1.10
ORalienvaultopen_source_security_information_managementMatch3.1.12
ORalienvaultopen_source_security_information_managementMatch4.0
ORalienvaultopen_source_security_information_managementMatch4.0.3
ORalienvaultopen_source_security_information_managementMatch4.0.4
ORalienvaultopen_source_security_information_managementMatch4.1
ORalienvaultopen_source_security_information_managementMatch4.1.2
ORalienvaultopen_source_security_information_managementMatch4.1.3
ORalienvaultopen_source_security_information_managementMatch4.2
ORalienvaultopen_source_security_information_managementMatch4.2.2
ORalienvaultopen_source_security_information_managementMatch4.2.3
ORalienvaultopen_source_security_information_managementMatch4.3
ORalienvaultopen_source_security_information_managementMatch4.3.1
ORalienvaultopen_source_security_information_managementMatch4.3.2
ORalienvaultopen_source_security_information_managementMatch4.3.3
ORalienvaultopen_source_security_information_managementMatch4.4
ORalienvaultopen_source_security_information_managementMatch4.5
ORalienvaultopen_source_security_information_managementMatch4.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| alienvault | open_source_security_information_management | * | cpe:2.3:a:alienvault:open_source_security_information_management:*:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 1.0.4 | cpe:2.3:a:alienvault:open_source_security_information_management:1.0.4:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 1.0.6 | cpe:2.3:a:alienvault:open_source_security_information_management:1.0.6:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.2 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.2:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.5 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.5-1 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-1:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.5-2 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-2:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.5-3 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-3:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 3.1 | cpe:2.3:a:alienvault:open_source_security_information_management:3.1:*:*:*:*:*:*:* |
Related
nvd
nvd
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2014-08-21 14:55:00
Cross site request forgery (csrf)
2014-06-13 14:55:00
Design/Logic Flaw
2014-06-13 14:55:00
checkpoint_advisories
checkpoint_advisories
zdi
zdi
exploitdb
exploitdb
cve
cve
CVE-2014-3805
2014-06-13 14:55:15
CVE-2014-3804
2014-06-13 14:55:15
openvas
openvas
AlienVault OSSIM Multiple RCE Vulnerabilities
2014-06-20 00:00:00
seebug
seebug
AlienVault OSSIM < 4.7.0 - av-centerd 'get_log_line()' Remote Code Execution
2014-07-01 00:00:00
packetstorm
packetstorm
AlienVault OSSIM av-centerd Command Injection
2014-06-19 00:00:00
Alienvault OSSIM av-centerd Util.pm sync_rserver Command Execution
2017-09-15 00:00:00
Alienvault OSSIM av-centerd 4.7.0 get_log_line Command Injection
2017-09-14 00:00:00
zdt
zdt
AlienVault OSSIM av-centerd Command Injection Exploit
2014-06-20 00:00:00
Alienvault OSSIM av-centerd Util.pm sync_rserver - Command Execution Exploit
2017-09-13 00:00:00
Alienvault OSSIM av-centerd 4.7.0 - (get_log_line) Command Injection Exploit
2017-09-13 00:00:00
metasploit
metasploit
AlienVault OSSIM av-centerd Command Injection
2014-06-16 17:10:30
dsquare
dsquare
AlienVault OSSIM av-centerd Util.pm RCE
2014-06-20 00:00:00
nessus
nessus
AlienVault OSSIM 'av-centerd' Remote Code Execution
2014-06-23 00:00:00
exploitpack
exploitpack
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.3
Confidence
Low
EPSS
0.952
Percentile
99.4%
Related for CVE-2014-5210