Vulnerability Details CVE-2014-3789
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.642
EPSS Ranking 98.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://cogentdatahub.com/ReleaseNotes.html
- http://www.securityfocus.com/bid/67486
- http://www.zerodayinitiative.com/advisories/ZDI-14-136/
- https://ics-cert.us-cert.gov/advisories/ICSA-15-246-01
- http://cogentdatahub.com/ReleaseNotes.html
- http://www.securityfocus.com/bid/67486
- http://www.zerodayinitiative.com/advisories/ZDI-14-136/
- https://ics-cert.us-cert.gov/advisories/ICSA-15-246-01
Products affected by CVE-2014-3789
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.0
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.0.2
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.1.0
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.1.1
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.1.1.63
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.1.2
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.2.2
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.3.0
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.3.1
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.3.2
-
cpe:2.3:a:cogentdatahub:cogent_datahub:7.3.3