CVE-2014-2626

High

Published: 26/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 allows remote attackers to create files, and consequently execute arbitrary code, via crafted input.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute code, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update to the latest version of HP Network Virtualization and implement security measures to prevent unauthorized access to the system.

Other vulnerabilities in HP Network Virtualization 8.6

CVE-2014-2625High
Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 allows remote attackers to read arbitrary files via crafted input.

Original NVD description (English source)

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024.