What is the CVSS score of CVE-2014-8582?

CVE-2014-8582 has a CVSS 2.0 base score of 6.4 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:N. EPSS exploitation probability: 0.3%.

Coyote Point Equalizer Firmware CVE-2014-8582

MEDIUM

2014-11-01 cve@mitre.org

Information Disclosure Fortinet Coyote Point Equalizer Firmware Coyote Point Equalizer Fortiadc Firmware Fortiadc 1000E Fortiadc 300E Fortiadc 400E Fortiadc 600E

6.4

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.4 MEDIUM

AV:N/AC:L/Au:N/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:P/I:P/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Nov 01, 2014 - 23:55 cve.org

MEDIUM 6.4

DescriptionCVE.org

FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10.2.0a allows remote attackers to obtain access to arbitrary subnets via unspecified vectors.

AnalysisAI

FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10.2.0a allows remote attackers to obtain access to arbitrary subnets via unspecified vectors. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10.2.0a allows remote attackers to obtain access to arbitrary subnets via unspecified vectors. Affected products include: Fortinet Coyote Point Equalizer Firmware, Fortinet Coyote Point Equalizer, Fortinet Fortiadc Firmware, Fortinet Fortiadc-1000E, Fortinet Fortiadc-300E. Version information: before 4.0.5.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.