Unscored severity · published Nov 28, 2014
CVE-2014-8424
ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication
–
CVSS
59.6%
EPSS
No
On KEV
Description
ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.
Exploitation
Is it being used?
Exploit prediction (EPSS)59.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VF
Vap2500 Firmware · Arris
through 08.41 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8424
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8424
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-14-388/
More from Vap2500 Firmware
7.2
CVE-2024-5196
Arris VAP2500 tools_command.php command injection
7.2
CVE-2024-5195
Arris VAP2500 diag_s.php command injection
7.2
CVE-2024-5194
Arris VAP2500 assoc_table.php command injection
–
CVE-2014-8425
The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files
–
CVE-2014-8423
Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors