CVE-2014-2025 — CRITICAL (9.8)

Vulnerability Description

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unknown vectors.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Unitedplanet	Intrexx	5.2

Related Weaknesses (CWE)

CWE-434

References

http://www.christian-schneider.net/advisories/CVE-2014-2025.txtThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99568Third Party AdvisoryVDB Entry
https://help.unitedplanet.com/?rq_AppGuid=C203A277EDDF9AD2492B776B996B20D4A7C583Third Party Advisory
http://www.christian-schneider.net/advisories/CVE-2014-2025.txtThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99568Third Party AdvisoryVDB Entry
https://help.unitedplanet.com/?rq_AppGuid=C203A277EDDF9AD2492B776B996B20D4A7C583Third Party Advisory

FAQ

What is CVE-2014-2025?

CVE-2014-2025 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attacker...

How severe is CVE-2014-2025?

CVE-2014-2025 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2014-2025?

Check the references section above for vendor advisories and patch information. Affected products include: Unitedplanet Intrexx.