Unscored severity · published Jul 15, 2014
CVE-2014-3418
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter
–
CVSS
7.2%
EPSS
No
On KEV
Description
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.2% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netmri · Infoblox
through 6.8.4; 6.0.2.42; 6.1.2; 6.2.1; 6.2.1.48; 6.8.2.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3418
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3418
Exploit
http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html
Exploit
http://seclists.org/fulldisclosure/2014/Jul/35
Exploit
http://www.exploit-db.com/exploits/34030
www.securityfocus.com
http://www.securityfocus.com/archive/1/532709/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/68471
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/94449
More from Netmri
9.8
CVE-2025-32814
An issue was discovered in Infoblox NETMRI before 7.6.1
8.8
CVE-2024-52874
In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks
7.2
CVE-2025-32813
An issue was discovered in Infoblox NETMRI before 7.6.1
6.5
CVE-2025-32815
An issue was discovered in Infoblox NETMRI before 7.6.1
6.1
CVE-2018-6643
Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter