Vulnerability Details CVE-2014-2625
Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.114
EPSS Ranking 93.3%
CVSS Severity
CVSS v2 Score 8.5
References
- http://secunia.com/advisories/60418
- http://www.securitytracker.com/id/1030624
- http://zerodayinitiative.com/advisories/ZDI-14-267/
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04374202
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04374202
- http://secunia.com/advisories/60418
- http://www.securitytracker.com/id/1030624
- http://zerodayinitiative.com/advisories/ZDI-14-267/
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04374202
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04374202
Products affected by CVE-2014-2625
-
cpe:2.3:a:hp:network_virtualization:8.6