CVE-2014-3805

High

Published: 13/06/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted requests (1) get_license, (2) get_log_line, or (3) update_system/upgrade_pro_web.

Risk Assessment

Exploitation of this vulnerability could lead to system takeover, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to version 4.7.0 or later to mitigate this vulnerability.

Other vulnerabilities in av-centerd SOAP service in AlienVault OSSIM

CVE-2014-4152High
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key.

Original NVD description (English source)

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_license, (2) get_log_line, or (3) update_system/upgrade_pro_web request, a different vulnerability than CVE-2014-3804.