CVE-2014-2084
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, w…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Skybox Security 6.3.x < 6.4.x - Multiple Denial of Service Vulnerabilities2014-05-12 · dos · hardware
- Skybox Security 6.3.x < 6.4.x - Multiple Information Disclosures2014-05-12 · webapps · hardware
Impact
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to obtain sensitive information via a request to (1) scripts/commands/getSystemInformation or (2) scripts/commands/getNetworkConfigurationInfo, cause a denial of service (reboot) via a request to scripts/commands/reboot, or cause a denial of service (shutdown) via a request to scripts/commands/shutdown.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Skyboxsecurity | Skybox View Appliance Iso | Versions 6.3.31-2.14, 6.3.33-2.14, 6.4.42-2.54, 6.4.45-2.56, 6.4.46-2.57 |
| Skyboxsecurity | Skybox View Appliance | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/33327
- http://www.exploit-db.com/exploits/33328
- http://www.osvdb.org/106842
- http://www.securityfocus.com/bid/67352
- https://www.skyboxsecurity.com/sites/default/files/file_resources/Skybox_Security_Appliance_Vulnerability.pdf
- http://www.exploit-db.com/exploits/33327
- http://www.exploit-db.com/exploits/33328
- http://www.osvdb.org/106842
- http://www.securityfocus.com/bid/67352
- https://www.skyboxsecurity.com/sites/default/files/file_resources/Skybox_Security_Appliance_Vulnerability.pdf