« Volver al listado

CVE-2014-3042

Estado: ModificadaMedia (4)—

IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2 y 5.1 en z/OS no implementa debidamente las transacciones CEMT, lo que permite a usuarios remotos autenticados causar una denegación de servicio (superposición de almacenamiento) mediante el uso de un emulador 3270 para enviar un flujo de datos 3270 inválido.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Cics Transaction Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3042",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-06-10T11:19:35.453",
  "references": [
    {
      "url": "http://secunia.com/advisories/59242",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI16710",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI16726",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI16727",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675195",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/67944",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/93338",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/59242",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI16710",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI16726",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI16727",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675195",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/67944",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/93338",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service (storage overlay) by using a 3270 emulator to send an invalid 3270 data stream."
    },
    {
      "lang": "es",
      "value": "IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2 y 5.1 en z/OS no implementa debidamente las transacciones CEMT, lo que permite a usuarios remotos autenticados causar una denegación de servicio (superposición de almacenamiento) mediante el uso de un emulador 3270 para enviar un flujo de datos 3270 inválido."
    }
  ],
  "lastModified": "2026-06-17T00:07:30.787",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:cics_transaction_server:-:-:-:*:-:z\\/os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84B8DE50-ABF3-4E94-8319-AEF8715E1DF8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:cics_transaction_server:3.1:-:-:*:-:z\\/os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35E21A2A-4051-4986-9A34-BD13843D5B2B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:cics_transaction_server:3.2:-:-:*:*:z\\/os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B9764BE-DDAA-4139-9724-5AFCB3CCF39D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:cics_transaction_server:4.1:-:-:*:-:z\\/os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D4FF2E9-E172-484F-B087-EFDD39CEB79B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:cics_transaction_server:5.1:-:-:*:-:z\\/os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "306F8C33-929E-4A3E-933A-7C9665AA2CCB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}