CVE-2014-3789
HighSummary
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before version 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
Risk Assessment
This vulnerability may lead to unauthorized access and potential system takeover, posing a serious security threat to the organization.
Recommendation
It is recommended to update Cogent DataHub to version 7.3.5 or later to mitigate this vulnerability.
Other vulnerabilities in Cogent DataHub
See all- CVE-2016-2288High
Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file.
- CVE-2014-2353High
Cross-site scripting (XSS) vulnerability in Cogent DataHub before version 7.3.5 allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.
- CVE-2014-3788High
A heap-based buffer overflow in the Web Server in Cogent DataHub before version 7.3.5 allows remote attackers to execute arbitrary code by sending a negative value in the Content-Length field in a request.
Original NVD description (English source)
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.