Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-3632
HistorySep 29, 2014 - 10:55 p.m.

CVE-2013-3632

2014-09-2922:55:08
CWE-264
[email protected]
web.nvd.nist.gov
1

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.862

Percentile

98.6%

JSON

The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.

Affected configurations

Nvd
Node
openmediavaultopenmediavaultMatch-
VendorProductVersionCPE
openmediavaultopenmediavault-cpe:2.3:a:openmediavault:openmediavault:-:*:*:*:*:*:*:*

Related

packetstorm 2
checkpoint_advisories 1
openvas 1
cvelist 1
zdt 2
metasploit 2
vulnrichment 1
cve 1
prion 1
exploitdb 1
rapid7blog 1
packetstorm
packetstorm
OpenMediaVault rpc.php Authenticated Cron Remote Code Execution
2024-07-31 00:00:00
OpenMediaVault Cron Remote Command Execution
2013-10-30 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenMediaVault Cron Remote Command Execution (CVE-2013-3632)
2014-05-25 00:00:00
openvas
openvas
Openmediavault < 0.5.32 Privilege Escalation Vulnerability
2023-09-25 00:00:00
cvelist
cvelist
CVE-2013-3632
2014-09-29 22:00:00
zdt
zdt
OpenMediaVault rpc.php Authenticated Cron Remote Code Execution Exploit
2024-07-31 00:00:00
OpenMediaVault Cron Remote Command Execution Vulnerability
2013-10-31 00:00:00
metasploit
metasploit
OpenMediaVault Cron Remote Command Execution
2013-10-30 15:25:48
OpenMediaVault rpc.php Authenticated Cron Remote Code Execution
2024-07-16 15:50:20
vulnrichment
vulnrichment
CVE-2013-3632
2014-09-29 22:00:00
cve
cve
CVE-2013-3632
2014-09-29 22:55:08
prion
prion
Command injection
2014-09-29 22:55:00
exploitdb
exploitdb
OpenMediaVault Cron - Remote Command Execution (Metasploit)
2013-10-31 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 08/02/2024
2024-08-02 18:36:25

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.862

Percentile

98.6%

JSON
Related for NVD:CVE-2013-3632
packetstorm2checkpoint_advisories1openvas1cvelist1zdt2metasploit2vulnrichment1cve1prion1exploitdb1rapid7blog1