Vulnerability Description
Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request.
CVSS Score
10.0
HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Infoblox | Netmri | <= 6.8.2.11 |
Related Weaknesses (CWE)
References
- http://unsecurityresearch.com/index.php?option=com_content&view=article&id=46&It
- http://www.securityfocus.com/bid/73423
- https://support.infoblox.com/app/answers/detail/a_id/3666/kw/NETMRI-23483
- http://unsecurityresearch.com/index.php?option=com_content&view=article&id=46&It
- http://www.securityfocus.com/bid/73423
- https://support.infoblox.com/app/answers/detail/a_id/3666/kw/NETMRI-23483
FAQ
What is CVE-2015-2033?
CVE-2015-2033 is a vulnerability with a CVSS score of 10.0 (HIGH). Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request.
How severe is CVE-2015-2033?
CVE-2015-2033 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-2033?
Check the references section above for vendor advisories and patch information. Affected products include: Infoblox Netmri.