CVE-2014-2356

Published: Jul 30, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.

Affected (16)

Products: Innominate: Mguard Firmware

Innominate

1 product

Mguard Firmware

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Innominate Mguard Firmware	Up to 7.5.0
Innominate Mguard Firmware	Version 4.0.4
Innominate Mguard Firmware	Version 4.1.1
Innominate Mguard Firmware	Version 4.2.3
Innominate Mguard Firmware	Version 5.0.1
Innominate Mguard Firmware	Version 5.1.6
Innominate Mguard Firmware	Version 6.0.2
Innominate Mguard Firmware	Version 6.1.5
Innominate Mguard Firmware	Version 7.0.2
Innominate Mguard Firmware	Version 7.1.1
Innominate Mguard Firmware	Version 7.2.1
Innominate Mguard Firmware	Version 7.3.1
Innominate Mguard Firmware	Version 7.4.1
Innominate Mguard Firmware	Version 8.0.0
Innominate Mguard Firmware	Version 8.0.1
Innominate Mguard Firmware	Version 8.0.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-14-189-02

Source: ics-cert@hq.dhs.gov

http://ics-cert.us-cert.gov/advisories/ICSA-14-189-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.