What is the CVSS score of CVE-2014-2509?

CVE-2014-2509 has a CVSS 2.0 base score of 5.4 (Medium). CVSS vector: AV:A/AC:M/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 0.3%.

Smarts Network Configuration Manager CVE-2014-2509

MEDIUM

2014-07-01 security_alert@emc.com

Information Disclosure Smarts Network Configuration Manager

5.4

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:A/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:M/Au:N/C:P/I:P/A:P

Attack Vector

Adjacent

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jul 01, 2014 - 00:55 cve.org

MEDIUM 5.4

DescriptionCVE.org

Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie.

AnalysisAI

Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie. Rated medium severity (CVSS 5.4). No vendor patch available.

Technical ContextAI

Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie. Affected products include: Emc Smarts Network Configuration Manager. Version information: before 9.3.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.