What is the CVSS score of CVE-2014-8533?

CVE-2014-8533 has a CVSS 2.0 base score of 7.5 (High). CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 3.0%.

Network Data Loss Prevention CVE-2014-8533

HIGH

2014-10-29 cve@mitre.org

RCE Network Data Loss Prevention

7.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 29, 2014 - 14:55 cve.org

HIGH 7.5

DescriptionCVE.org

McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection.

AnalysisAI

McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection. Affected products include: Mcafee Network Data Loss Prevention. Version information: before 9.3.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Network Data Loss Prevention

View all

CVE-2017-4011 MEDIUM This Month POC

6.1 May 17

Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x a

CVE-2017-4014 HIGH This Week

8.0 May 17

Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authe

CVE-2014-8530 HIGH This Week

7.5 Oct 29

Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sen

CVE-2014-8522 HIGH This Week

7.5 Oct 29

The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it

CVE-2017-3935 HIGH This Week

7.5 Oct 31

Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to per

CVE-2014-8531 MEDIUM This Month

6.5 Oct 29

The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it

CVE-2014-8523 MEDIUM This Month

6.8 Oct 29

Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote a

CVE-2017-4012 MEDIUM This Month

6.5 May 17

Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authe

CVE-2017-3934 MEDIUM This Month

5.9 Oct 31

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevent

CVE-2017-3933 MEDIUM This Month

5.4 Oct 31

Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote a

CVE-2017-4013 MEDIUM This Month

5.3 May 17

Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain pr

CVE-2017-4017 MEDIUM This Month

5.3 May 17

User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view u

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2025-53770 CRITICAL POC

9.8

CVE-2020-7961 CRITICAL POC

9.8

CVE-2014-8533 vulnerability details – vuln.today

Back