CVE-2014-2950 Datum Systems SnIP on PSM-500 and PSM-4500 devices does not require authentication for FTP sessions, which allows remote attackers to obtain sensitive information via RETR commands.
HighCVSS 7.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Datum Systems SnIP on PSM-500 and PSM-4500 devices does not require authentication for FTP sessions, which allows remote attackers to obtain sensitive information via RETR commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| datumsystems snip | All versions | No fix listed |
References
- VU#917348 third-party-advisory us-government-resource