PT-2014-8518 · Arris · Arris Vap2500

Headlesszeke + 1 · Publicado 2014-11-25 · Atualizado 2014-11-28 · CVE-2014-8424

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ARRIS VAP2500 versions prior to FW08.41

Description The issue allows remote attackers to bypass authentication due to improper password validation.

Recommendations For ARRIS VAP2500 versions prior to FW08.41, update to FW08.41 or later to resolve the issue.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-8424

ZDI-14-388

Produtos afetados

Arris Vap2500

Referências · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vap2500_tools_command_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/35372 · Exploit
• http://zerodayinitiative.com/advisories/ZDI-14-388 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8424 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-388 · Nota de Segurança