What is the CVSS score of CVE-2014-3910?

CVE-2014-3910 has a CVSS 2.0 base score of 4.4 (Medium). CVSS vector: AV:L/AC:M/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 0.1%.

Emftp CVE-2014-3910

MEDIUM

Code Injection (CWE-94)

2014-09-05 vultures@jpcert.or.jp

RCE Code Injection Emftp

4.4

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:P/I:P/A:P

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Sep 05, 2014 - 17:55 cve.org

MEDIUM 4.4

DescriptionCVE.org

Emurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is launched during an attempt to read a similarly named file that lacks a filename extension.

AnalysisAI

Emurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is launched during an attempt to read a similarly named file that lacks a filename extension. Rated medium severity (CVSS 4.4). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Code Injection (CWE-94), which allows attackers to inject and execute arbitrary code within the application. Emurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is launched during an attempt to read a similarly named file that lacks a filename extension. Affected products include: Emurasoft Emftp.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Never evaluate user-controlled input as code. Use sandboxing, disable dangerous functions, apply strict input validation.