« Volver al listado

CVE-2014-7989

Estado: ModificadaMedia (6.8)—

Cisco Unified Computing System en los servidores blade de la serie B permite a usuarios locales ganar privilegios de shell a través de un comando manipulado (1) ping6 o (2) traceroute6, también conocido como Bug ID CSCuq38176.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (8)

Cisco — B200 M3Cisco — B200 M4Cisco — B22 M3Cisco — B230 M2Cisco — B260 M4Cisco — B420 M3Cisco — B440 M2Cisco — B460 M4

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-7989",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.1,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-11-07T11:55:03.860",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7989",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/70969",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1031178",
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98530",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7989",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/70969",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1031178",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98530",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) traceroute6 command, aka Bug ID CSCuq38176."
    },
    {
      "lang": "es",
      "value": "Cisco Unified Computing System en los servidores blade de la serie B permite a usuarios locales ganar privilegios de shell a través de un comando manipulado (1) ping6 o (2) traceroute6, también conocido como Bug ID CSCuq38176."
    }
  ],
  "lastModified": "2026-06-17T00:16:03.793",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:b200_m3:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "656031C3-E75A-4A8C-BD58-20856D34BA83"
            },
            {
              "criteria": "cpe:2.3:h:cisco:b200_m4:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9472111-7E65-401A-863A-00598D0972BD"
            },
            {
              "criteria": "cpe:2.3:h:cisco:b22_m3:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7E301E9-4BF4-4826-96EA-4E65ED023266"
            },
            {
              "criteria": "cpe:2.3:h:cisco:b230_m2:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "620A6325-CA95-499D-99A3-DC61919B9E96"
            },
            {
              "criteria": "cpe:2.3:h:cisco:b260_m4:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F409CE1-6DDC-455A-82FF-1BD09A02AEEF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:b420_m3:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89CEB063-07C3-4948-81FA-DC402E7D5F03"
            },
            {
              "criteria": "cpe:2.3:h:cisco:b440_m2:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DA5312E-9C1F-47DC-9576-FA2203D58247"
            },
            {
              "criteria": "cpe:2.3:h:cisco:b460_m4:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFB43158-F560-4883-BF0F-B03576E3FA47"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}