Unscored severity · published Oct 7, 2014
CVE-2014-4870
/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local…
–
CVSS
0.4%
EPSS
No
On KEV
Description
/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V5
Vyatta 5400 Vrouter · Brocade
All versions, or not specified · source: NVD
V5
Vyatta 5400 Vrouter Software · Brocade
6.4; 6.6; 6.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4870
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4870
Third Party Advisory
http://www.kb.cert.org/vuls/id/111588
More from Vyatta 5400 Vrouter
–
CVE-2014-4869
The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group
–
CVE-2014-4868
The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell…