CVE-2014-2276 in Connectrix Manager
Résumé (Anglaise)
The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Réserver
04/03/2014
Divulgation
21/03/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 66745 | EMC Connectrix Manager Firmware élévation de privilèges | 264 | Non défini | Correctif officiel | CVE-2014-2276 |