Vulnerability Details : CVE-2014-7299
Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session.
Products affected by CVE-2014-7299
- cpe:2.3:o:arubanetworks:arubaos:6.4.2.1:fips:*:*:*:*:*:*
- cpe:2.3:o:arubanetworks:arubaos:6.3.11:*:*:*:*:*:*:*
- cpe:2.3:o:arubanetworks:arubaos:6.3.11:fips:*:*:*:*:*:*
- cpe:2.3:o:arubanetworks:arubaos:6.4.2.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-7299
0.19%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 37 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-7299
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2014-7299
-
http://www.arubanetworks.com/support/alerts/aid-10072014.txt
Nothing found for Support Alerts Aid 10072014 TxtVendor Advisory
Jump to