What is the CVSS score of CVE-2014-7989?

CVE-2014-7989 has a CVSS 2.0 base score of 6.8 (Medium). CVSS vector: AV:L/AC:L/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.1%.

B200 M3 CVE-2014-7989

MEDIUM

Improper Input Validation (CWE-20)

2014-11-07 psirt@cisco.com

Cisco Information Disclosure B200 M3 B200 M4 B22 M3 B230 M2 B260 M4 B420 M3 B440 M2 B460 M4

6.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:L/AC:L/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:S/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Nov 07, 2014 - 11:55 cve.org

MEDIUM 6.8

DescriptionCVE.org

Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) traceroute6 command, aka Bug ID CSCuq38176.

AnalysisAI

Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) traceroute6 command, aka Bug ID CSCuq38176. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) traceroute6 command, aka Bug ID CSCuq38176. Affected products include: Cisco B200 M3, Cisco B200 M4, Cisco B22 M3, Cisco B230 M2, Cisco B260 M4.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.