Auth bypass in Infoblox Netmri

CVE-2015-2033

Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request.

Vulnerability class: Broken Authentication

EPSS: 0.030 (85.8th percentile) — read the EPSS interpretation.

Affected products

Infoblox Netmri
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)