CVE-2014-8582

FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10.2.0a allows remote attackers to obtain access to arbitrary subnets via unspecified vectors.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://docs.fortinet.com/uploaded/files/2164/FortiADC-E-4.0.5-GA-Release-Notes.pdf
http://secunia.com/advisories/61866
http://www.fortiguard.com/advisory/FG-IR-14-032/	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98384

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:fortinet:coyote_point_equalizer_firmware:10.2.0a:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:coyote_point_equalizer:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:o:fortinet:fortiadc_firmware:3.1.1:::::::*
	cpe:2.3:o:fortinet:fortiadc_firmware:3.2.0:::::::*
	cpe:2.3:o:fortinet:fortiadc_firmware:3.2.1:::::::*
	cpe:2.3:o:fortinet:fortiadc_firmware:4.0.4:::::::*

OR	cpe:2.3:h:fortinet:fortiadc-1000e:-:::::::*
	cpe:2.3:h:fortinet:fortiadc-300e:-:::::::*
	cpe:2.3:h:fortinet:fortiadc-400e:-:::::::*
	cpe:2.3:h:fortinet:fortiadc-600e:-:::::::*

History

No history.

Information

Published : 2014-11-01 23:55

Updated : 2024-02-28 12:20

NVD link : CVE-2014-8582

Mitre link : CVE-2014-8582

CVE.ORG link : CVE-2014-8582

JSON object : View

Products Affected

fortinet

fortiadc-1000e
coyote_point_equalizer
fortiadc-300e
fortiadc_firmware
fortiadc-400e
fortiadc-600e
coyote_point_equalizer_firmware

CWE

NVD-CWE-noinfo

{"id": "CVE-2014-8582", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-11-01T23:55:09.823", "references": [{"url": "http://docs.fortinet.com/uploaded/files/2164/FortiADC-E-4.0.5-GA-Release-Notes.pdf", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/61866", "source": "cve@mitre.org"}, {"url": "http://www.fortiguard.com/advisory/FG-IR-14-032/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98384", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10.2.0a allows remote attackers to obtain access to arbitrary subnets via unspecified vectors."}, {"lang": "es", "value": "FortiNet FortiADC-E con firmware 3.1.1 anterior a 4.0.5 y Coyote Point Equalizer con firmware 10.2.0a permite a atacantes remotos obtener el acceso a subredes arbitrarios a trav\u00e9s de vectores no especificados."}], "lastModified": "2017-09-08T01:29:25.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:coyote_point_equalizer_firmware:10.2.0a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC84FDDC-1990-4730-80A9-D8612C69C4DD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:fortinet:coyote_point_equalizer:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACAC0FC5-6E64-4092-B2FB-DE2AEF7D680B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortiadc_firmware:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA8F97BF-61EA-4896-B490-349BEBAA050C"}, {"criteria": "cpe:2.3:o:fortinet:fortiadc_firmware:3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25B66E1A-93E2-4251-8953-3C82704D9DD3"}, {"criteria": "cpe:2.3:o:fortinet:fortiadc_firmware:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "985AD97D-669B-433C-975E-877B147503EE"}, {"criteria": "cpe:2.3:o:fortinet:fortiadc_firmware:4.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99162FEE-AFDF-44A5-9D66-D1BD65CDA8D0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:fortinet:fortiadc-1000e:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3C04FD0-F54D-461C-AB13-80557B838FB6"}, {"criteria": "cpe:2.3:h:fortinet:fortiadc-300e:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7E75BFB-3DE5-4DB5-9C90-3AB9D22EBC08"}, {"criteria": "cpe:2.3:h:fortinet:fortiadc-400e:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1A8EE3A-31E1-44B5-AA2C-D6F2989C4B50"}, {"criteria": "cpe:2.3:h:fortinet:fortiadc-600e:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94593E5C-BCBC-4368-89E2-0372A17D9296"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}