CVE-2014-2626
high · 9.4Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024.
9.4
CVSS
19.4%
EPSS (exploit prob.)
97th
EPSS percentile
2014-07-26
Published
AV:N/AC:L/Au:N/C:C/I:C/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| hp | network_virtualization | 8.6 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/60418
- http://www.securitytracker.com/id/1030624
- http://zerodayinitiative.com/advisories/ZDI-14-268/
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04374202
- http://secunia.com/advisories/60418
- http://www.securitytracker.com/id/1030624
- http://zerodayinitiative.com/advisories/ZDI-14-268/
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04374202
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-2626