PT-2014-4978 · Datum Systems · Snip

Ashish Kamble + 1 · Published 2014-07-14 · Updated 2014-07-15 · CVE-2014-2950

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Datum Systems SnIP on PSM-500 and PSM-4500 devices (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information without requiring authentication for FTP sessions. This can be achieved via RETR commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-2950

Affected Products

Snip

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-2950 · Security Note
• http://kb.cert.org/vuls/id/917348 · Note