Unscored severity · published Jul 15, 2014
CVE-2014-3419
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors
–
CVSS
0.5%
EPSS
No
On KEV
Description
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netmri · Infoblox
through 6.8.4; 6.0.2.42; 6.1.2; 6.2.1; 6.2.1.48; 6.8.2.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3419
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3419
Exploit
http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html
Exploit
http://packetstormsecurity.com/files/127410/Infoblox-6.8.4.x-Weak-MySQL-Password.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/532710/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/68473
www.securitytracker.com
http://www.securitytracker.com/id/1030542
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/94450
More from Netmri
9.8
CVE-2025-32814
An issue was discovered in Infoblox NETMRI before 7.6.1
8.8
CVE-2024-52874
In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks
7.2
CVE-2025-32813
An issue was discovered in Infoblox NETMRI before 7.6.1
6.5
CVE-2025-32815
An issue was discovered in Infoblox NETMRI before 7.6.1
6.1
CVE-2018-6643
Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter