PT-2014-4978 · Datum Systems · Snip

Ashish Kamble + 1 · Publicado 2014-07-14 · Atualizado 2014-07-15 · CVE-2014-2950

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Datum Systems SnIP on PSM-500 and PSM-4500 devices (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information without requiring authentication for FTP sessions. This can be achieved via RETR commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2014-2950

Produtos afetados

Snip

Referências · 2

• http://kb.cert.org/vuls/id/917348 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2950 · Nota de Segurança