CVE-2014-2347
AMTELCO miSecure Information Exposure
Vexday Risk Score
41Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 7EPSS 2.4%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
25 Apr 2014Public PoC
06 May 2014Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.
AV:N/AC:M/Au:S/C:C/I:P/A:N
Affected products
AMTELCO · miSecureMessagespublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/33019unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →