Unscored severity · published Oct 7, 2014
CVE-2014-4869
The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group
–
CVSS
1.1%
EPSS
No
On KEV
Description
The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V5
Vyatta 5400 Vrouter · Brocade
All versions, or not specified · source: NVD
V5
Vyatta 5400 Vrouter Software · Brocade
6.4; 6.6; 6.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4869
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4869
Third Party Advisory
http://www.kb.cert.org/vuls/id/111588
More from Vyatta 5400 Vrouter
–
CVE-2014-4870
/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local…
–
CVE-2014-4868
The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell…