RCE in Brocade Vyatta 5400 Vrouter
CVE-2014-4868
The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.027 (84.7th percentile) — read the EPSS interpretation.
Affected products
- Brocade Vyatta_5400_vrouter
- Brocade Vyatta_5400_vrouter_software — versions 6.4, 6.6, 6.7
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)