Unscored severity · published May 17, 2014
CVE-2014-2084
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote…
–
CVSS
4.4%
EPSS
No
On KEV
Description
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to obtain sensitive information via a request to (1) scripts/commands/getSystemInformation or (2) scripts/commands/getNetworkConfigurationInfo, cause a denial of service (reboot) via a request to scripts/commands/reboot, or cause a denial of service (shutdown) via a request to scripts/commands/shutdown.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SV
Skybox View Appliance · Skyboxsecurity
All versions, or not specified · source: NVD
SV
Skybox View Appliance Iso · Skyboxsecurity
6.3.31-2.14; 6.3.33-2.14; 6.4.42-2.54; 6.4.45-2.56; 6.4.46-2.57 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2084
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2084
Exploit
http://www.exploit-db.com/exploits/33327
Exploit
http://www.exploit-db.com/exploits/33328
www.osvdb.org
http://www.osvdb.org/106842
www.securityfocus.com
http://www.securityfocus.com/bid/67352
www.skyboxsecurity.com
https://www.skyboxsecurity.com/sites/default/files/file_resources/Skybox_Security_Appliance_Vulnerability.pdf