« Volver al listado

CVE-2014-4869

Estado: ModificadaMedia (5)—

The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Brocade — Vyatta 5400 VrouterBrocade — Vyatta 5400 Vrouter Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-4869",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-10-07T10:55:04.337",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/111588",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/111588",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group."
    },
    {
      "lang": "es",
      "value": "El vRouter Brocade Vyatta 5400 6.4R(x), 6.6R(x), y 6.7R1 permite a atacantes obtener información sensible de contraseñas cifradas mediante el aprovechamiento de la pertenencia del del grupo de operadores."
    }
  ],
  "lastModified": "2026-06-17T00:10:43.083",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:brocade:vyatta_5400_vrouter_software:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06899348-8216-4A9B-968B-6BD58DC00F2F"
            },
            {
              "criteria": "cpe:2.3:a:brocade:vyatta_5400_vrouter_software:6.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "993BE009-53F0-4B20-9682-8C428621DEE7"
            },
            {
              "criteria": "cpe:2.3:a:brocade:vyatta_5400_vrouter_software:6.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "728699C7-BBD3-4828-9AF2-7248C205D297"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:brocade:vyatta_5400_vrouter:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11F509C4-3324-46B7-9556-73613F6209CD"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}