What is the CVSS score of CVE-2014-2226?

CVE-2014-2226 has a CVSS 2.0 base score of 2.6 (Low). CVSS vector: AV:N/AC:H/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.3%.

Unifi Controller CVE-2014-2226

LOW

Credentials Management Errors (CWE-255)

2014-07-29 cve@mitre.org

Ubiquiti Authentication Bypass Unifi Controller

2.6

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

2.6 LOW

AV:N/AC:H/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:N/C:P/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jul 29, 2014 - 14:55 cve.org

LOW 2.6

DescriptionCVE.org

Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.

AnalysisAI

Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-255. Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors. Affected products include: Ui Unifi Controller. Version information: before 3.2.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.