CyberSec.Space Logo
CVEブラウザに戻る

CVE-2014-3419

HIGH
7.2
CVSS Severity Score
EPSS Score0.0080%
EPSS Percentile3.52th
Published2014年7月15日
Last Modified2026年5月6日

Vulnerability Description

Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.

Affected Platforms (CPE)

📦
Infoblox

Netmri

<= 6.8.4
📦
Infoblox

Netmri

= 6.0.2.42
📦
Infoblox

Netmri

= 6.1.2
📦
Infoblox

Netmri

= 6.2.1
📦
Infoblox

Netmri

= 6.2.1.48
📦
Infoblox

Netmri

= 6.8.2.11

References & Advisories

🔗 http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html
🔗 http://packetstormsecurity.com/files/127410/Infoblox-6.8.4.x-Weak-MySQL-Password.html
🔗 http://www.securityfocus.com/archive/1/532710/100/0/threaded
🔗 http://www.securityfocus.com/bid/68473
🔗 http://www.securitytracker.com/id/1030542
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/94450
🔗 https://github.com/depthsecurity/NetMRI-2014-3418
🔗 http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html

関連する脆弱性情報

CVE-2014-341810.0

config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacha...

CVE-2015-203310.0

Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands wit...

CVE-2018-66436.1

Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.

CVE-2016-64846.1

CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP h...