CVE-2014-7989

Published: Nov 7, 2014Modified: May 6, 2026

6.8

Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 3.1 / Impact: 10.0

Source: NVD

Description

Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) traceroute6 command, aka Bug ID CSCuq38176.

Affected (8)

Products: Cisco: B200 M3, B200 M4, B22 M3, B230 M2, B260 M4, B420 M3, B440 M2, B460 M4

8 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Cisco B200 M3	All versions
Cisco B200 M4	All versions
Cisco B22 M3	All versions
Cisco B230 M2	All versions
Cisco B260 M4	All versions
Cisco B420 M3	All versions
Cisco B440 M2	All versions
Cisco B460 M4	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7989

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/70969

Source: psirt@cisco.com

http://www.securitytracker.com/id/1031178

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/98530

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7989

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/70969

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031178

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/98530

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.