CVE-2014-9614

The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

68.71% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-798

Published

2020-02-19

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9614.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2014-9613
• CVE-2014-9615
• CVE-2014-9612
• CVE-2014-9617
• CVE-2014-9611
• CVE-2014-9618