CVE-2014-2084

Skybox Security 6.3.x < 6.4.x - Multiple Information Disclosures

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2014-2084 has a selected CVSS score of 8.5; EIP currently links 2 catalogued exploits.

Description

Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to obtain sensitive information via a request to (1) scripts/commands/getSystemInformation or (2) scripts/commands/getNetworkConfigurationInfo, cause a denial of service (reboot) via a request to scripts/commands/reboot, or cause a denial of service (shutdown) via a request to scripts/commands/shutdown.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBSkybox Security 6.3.x < 6.4.x - Multiple Information DisclosuresExploitDB exploitby Luigi VezzosoNot analyzed1 file
ExploitDB
PoC details
ExploitDBSkybox Security 6.3.x < 6.4.x - Multiple Denial of Service VulnerabilitiesExploitDB exploitby Luigi VezzosoNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

References

6