1. Home
  2. CVE Database
  3. CVE-2014-0679
HIGH · 9.0

CVE-2014-0679

Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated users to execute arbitrary commands with root privileges via a...

Vulnerability Description

Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated users to execute arbitrary commands with root privileges via an unspecified URL, aka Bug ID CSCum71308.

CVSS Score

9.0

HIGH

AV:N/AC:L/Au:S/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoPrime Infrastructure1.2

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2014-0679?

CVE-2014-0679 is a vulnerability with a CVSS score of 9.0 (HIGH). Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated users to execute arbitrary commands with root privileges via a...

How severe is CVE-2014-0679?

CVE-2014-0679 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-0679?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Prime Infrastructure.