CVE-2014-9193 Innominate mGuard Improper Privilege Management
HighCVSS 9.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| innominate mguard firmware | <= 7.6.6 | No fix listed |
| innominate mguard firmware | = 8.0.0 | No fix listed |
| innominate mguard firmware | = 8.0.1 | No fix listed |
| innominate mguard firmware | = 8.0.2 | No fix listed |
| innominate mguard firmware | = 8.0.3 | No fix listed |
| innominate mguard firmware | = 8.1.1 | No fix listed |
| innominate mguard firmware | = 8.1.2 | No fix listed |
| innominate mguard firmware | = 8.1.3 | No fix listed |
| innominate mGuard | <= 8.1.3 | No fix listed |
References
- www.innominate.com vendor-advisory
- www.cisa.gov
- ics-cert.us-cert.gov third-party-advisory us-government-resource