CVE-2014-3857: SQL Injection
Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) x16 or (2) x17 parameter to print.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3857?
CVE-2014-3857 is classified as a high severity vulnerability due to its potential for remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2014-3857?
To fix CVE-2014-3857, upgrade Kerio Control to version 8.3.2 or later.
Who is affected by CVE-2014-3857?
CVE-2014-3857 affects users of Kerio Control versions 8.3.1 and earlier.
What are the attack vectors for CVE-2014-3857?
The attack vectors for CVE-2014-3857 involve remote authenticated users exploiting SQL injection vulnerabilities in the print.php file.
What components of Kerio Control are vulnerable in CVE-2014-3857?
CVE-2014-3857 specifically targets the Kerio Control Statistics feature through the x_16 and x_17 parameters.