CVE-2014-2533: High severity BlackBerry QNX Neutrino RTOS vulnerability
Published Mar 18, 2014
·Updated
/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument.
Affected Software
3 affected components
BlackBerry QNX Neutrino RTOS=6.4.1
BlackBerry QNX Neutrino RTOS=6.5.0
BlackBerry QNX Neutrino RTOS=6.5.0-sp1
Event History
Mar 18, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·05:18 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2533?
CVE-2014-2533 is considered a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2014-2533?
To fix CVE-2014-2533, update to a patched version of BlackBerry QNX Neutrino RTOS that addresses this vulnerability.
3
Who is affected by CVE-2014-2533?
CVE-2014-2533 affects local users of BlackBerry QNX Neutrino RTOS versions 6.4.x and 6.5.x.
4
What kind of attack does CVE-2014-2533 allow?
CVE-2014-2533 allows local users to execute arbitrary code with elevated privileges.
5
Is CVE-2014-2533 a local or remote vulnerability?
CVE-2014-2533 is classified as a local vulnerability, as it requires local access to exploit.