VulnerabilityModified

CVE-2014-2352

Exploiting this vulnerability may enable an attacker to access a limited number of hardcoded file types.

MEDIUM 6.4EPSS 2.31%

Does this matter?

Lower severity and a low EPSS score (2.31%). Track it; it rarely justifies an emergency change on its own.

Description

The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable an attacker to access a limited number of hardcoded file types. Further exploitation of this vulnerability may allow an attacker to cause the web server component to enter a denial-of-service condition.

CVSS 2.0: 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
EPSS: 2.31% probability · 82th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: cogentdatahub/cogent datahub
Source: ics-cert@hq.dhs.gov

References

http://cogentdatahub.com/Download_Software.html
https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02
http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.