Remote Command Execution Vulnerability in Infoblox Network Automation
CVE-2015-2033

Currently unrated

Key Information:

Vendor

Infoblox

Status
Netmri
Vendor
CVE Published:
20 February 2015

What is CVE-2015-2033?

The Anyterm Daemon in Infoblox Network Automation NetMRI prior to version NETMRI-23483 is susceptible to a vulnerability that permits remote attackers to execute arbitrary commands with root privileges. This can be achieved through a specially crafted request involving the terminal/anyterm-module. This vulnerability poses significant risks as it allows unauthorized users to manipulate the affected systems potentially leading to data breaches and system compromises.

References

http://www.securityfocus.com/bid/73423
vdb-entryx_refsource_BID
http://unsecurityresearch.com/index.php?option=com_conten...
x_refsource_MISC
https://support.infoblox.com/app/answers/detail/a_id/3666...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.