CVE-2014-3459

medium · 6.8

Heap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property.

6.8

CVSS

11.6%

EPSS (exploit prob.)

96th

EPSS percentile

2014-08-07

Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
solarwinds	network_configuration_manager	<= 7.2.2
solarwinds	network_configuration_manager	7.2.0
solarwinds	network_configuration_manager	7.2.1

Check a specific version with /api/v1/cve/match.

References

http://zerodayinitiative.com/advisories/ZDI-14-133/
http://zerodayinitiative.com/advisories/ZDI-14-133/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-3459