Unscored severity · published Oct 7, 2014
CVE-2014-4868
The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell…
–
CVSS
2.7%
EPSS
No
On KEV
Description
The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V5
Vyatta 5400 Vrouter · Brocade
All versions, or not specified · source: NVD
V5
Vyatta 5400 Vrouter Software · Brocade
6.4; 6.6; 6.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4868
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4868
Third Party Advisory
http://www.kb.cert.org/vuls/id/111588
More from Vyatta 5400 Vrouter
–
CVE-2014-4870
/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local…
–
CVE-2014-4869
The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group