CVE-2014-3789: Code Injection
Published May 22, 2014
·Updated
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected Software
12 affected components
Cogentdatahub Cogent Datahub<=7.3.4
Cogentdatahub Cogent Datahub=7.0
Cogentdatahub Cogent Datahub=7.0.2
Cogentdatahub Cogent Datahub=7.1.0
Cogentdatahub Cogent Datahub=7.1.1
Cogentdatahub Cogent Datahub=7.1.1.63
Cogentdatahub Cogent Datahub=7.1.2
Cogentdatahub Cogent Datahub=7.2.2
Cogentdatahub Cogent Datahub=7.3.0
Cogentdatahub Cogent Datahub=7.3.1
Cogentdatahub Cogent Datahub=7.3.2
Cogentdatahub Cogent Datahub=7.3.3
Remediation
Patch Available
Event History
May 22, 2014
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3789?
CVE-2014-3789 is considered a critical vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2014-3789?
To fix CVE-2014-3789, upgrade Cogent DataHub to version 7.3.5 or later.
3
What types of attacks are possible with CVE-2014-3789?
CVE-2014-3789 allows remote attackers to execute arbitrary commands on affected systems.
4
Which versions of Cogent DataHub are affected by CVE-2014-3789?
CVE-2014-3789 affects Cogent DataHub versions prior to 7.3.5, including various 7.x versions.
5
Is user interaction required for exploiting CVE-2014-3789?
Exploiting CVE-2014-3789 can occur without user interaction, making it highly dangerous.