CVE-2014-5210
HighSummary
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted remote_task or get_license requests.
Risk Assessment
Exploitation of this vulnerability could lead to remote attackers gaining control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to version 4.7.0 or later to mitigate this vulnerability.
Other vulnerabilities in av-centerd SOAP service
See all- CVE-2014-4153High
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.
- CVE-2014-4151High
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request.
- CVE-2014-3804High
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted requests related to system info updates, ossec tasks, and admin_ip or framework_ip settings.
Original NVD description (English source)
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.