CVE-2014-5329

GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests (CVE-2011-3192), which may lead to a denial-of-service (DoS) condition.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://jvn.jp/en/jp/JVN23809730/	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:tripodworks:gigapod_officehard_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tripodworks:gigapod_officehard:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:tripodworks:gigapod_2010_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tripodworks:gigapod_2010:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:tripodworks:gigapod_3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tripodworks:gigapod_3:-:*:*:*:*:*:*:*

History

14 Sep 2023, 16:12

Type	Values Removed	Values Added
CPE		cpe:2.3:h:tripodworks:gigapod_2010:-:::::::* cpe:2.3:h:tripodworks:gigapod_3:-:::::::* cpe:2.3:o:tripodworks:gigapod_3_firmware:::::::: cpe:2.3:h:tripodworks:gigapod_officehard:-:::::::* cpe:2.3:o:tripodworks:gigapod_2010_firmware:::::::: cpe:2.3:o:tripodworks:gigapod_officehard_firmware::::::::
CWE		NVD-CWE-noinfo
References	~~(MISC) https://jvn.jp/en/jp/JVN23809730/ -~~	(MISC) https://jvn.jp/en/jp/JVN23809730/ - Third Party Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
First Time		Tripodworks Tripodworks gigapod 2010 Firmware Tripodworks gigapod 3 Tripodworks gigapod 2010 Tripodworks gigapod 3 Firmware Tripodworks gigapod Officehard Tripodworks gigapod Officehard Firmware

08 Sep 2023, 03:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-09-08 03:15

Updated : 2024-02-28 20:33

NVD link : CVE-2014-5329

Mitre link : CVE-2014-5329

CVE.ORG link : CVE-2014-5329

JSON object : View

Products Affected

tripodworks

gigapod_2010_firmware
gigapod_3_firmware
gigapod_3
gigapod_2010
gigapod_officehard
gigapod_officehard_firmware

CWE

NVD-CWE-noinfo

{"id": "CVE-2014-5329", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-09-08T03:15:07.387", "references": [{"url": "https://jvn.jp/en/jp/JVN23809730/", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation.\r\n8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests (CVE-2011-3192), which may lead to a denial-of-service (DoS) condition."}, {"lang": "es", "value": "Los servidores de archivos GIGAPOD (modelo de Dispositivo y modelo de Software) proporcionan dos interfaces web, 80/tcp y 443/tcp para la operaci\u00f3n del usuario, y 8001/tcp para la operaci\u00f3n administrativa. 8001/tcp es servido por una versi\u00f3n del servidor Apache HTTP que contiene un error en el manejo de solicitudes HTTP (CVE-2011-3192), que puede conducir a una condici\u00f3n de Denegaci\u00f3n de Servicio (DoS)."}], "lastModified": "2023-09-14T16:12:01.977", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tripodworks:gigapod_officehard_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB7A1124-19E8-41C7-AC57-2DBCC5D16D86", "versionEndIncluding": "3.04.03"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tripodworks:gigapod_officehard:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7AC5BBBD-0779-43CC-A0F6-9BA62B331691"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tripodworks:gigapod_2010_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49F0663C-C397-4788-836E-0EB810270EA9", "versionEndIncluding": "3.01.02"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tripodworks:gigapod_2010:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "03E7B57D-B3FB-4E60-9B0A-C6D6FDE4BC54"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tripodworks:gigapod_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFA2BF10-37C5-4B86-8572-ABB87AF6018B", "versionEndIncluding": "3.01.02"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tripodworks:gigapod_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2BD9132E-0CB0-4F39-A156-35FE958A6129"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "vultures@jpcert.or.jp"}