CVE-2014-5470
CVE-2014-5470
Vexday Risk Score
68High priority
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 9.8EPSS 10.0%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Lifecycle
28 Aug 2014Metasploit module available
21 Jun 2024Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/35549unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →