VulnerabilityModified
CVE-2014-5073
vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
HIGH 7.5EPSS 73.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 73.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 73.45% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- vmturbo/operations manager
- Source
- cve@mitre.org
References
- http://disse.cting.org/2014/07/30/vmturbo-operation-manager-remote-command-execution/Exploit
- http://packetstormsecurity.com/files/127864/VMTurbo-Operations-Manager-4.6-vmtadmin.cgi-Remote-Command-Execution.htmlExploit
- http://secunia.com/advisories/58880
- http://secunia.com/secunia_research/2014-8/
- http://www.exploit-db.com/exploits/34335Exploit
- http://www.osvdb.org/109572
- http://www.securityfocus.com/bid/69225Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95319
- http://disse.cting.org/2014/07/30/vmturbo-operation-manager-remote-command-execution/Exploit
- http://packetstormsecurity.com/files/127864/VMTurbo-Operations-Manager-4.6-vmtadmin.cgi-Remote-Command-Execution.htmlExploit
- http://secunia.com/advisories/58880
- http://secunia.com/secunia_research/2014-8/
- http://www.exploit-db.com/exploits/34335Exploit
- http://www.osvdb.org/109572
- http://www.securityfocus.com/bid/69225Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95319
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.