CVE-2014-3671

CVSS: UnknownRejected
Published 13-10-2014Last modified 13-10-2014
Open JSON

Vulnerability summary

CVE-2014-3671 is a vulnerability with no CVSS score yet. 14 public exploits are recorded.

Overall risk
10/100
0100
Low · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits14exploit-database

Timeline

  1. 13-10-2014
    PublishedVulnerability first disclosed.
  2. 13-10-2014
    Last modifiedVulnerability information updated.

Description

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187. Reason: This candidate is a duplicate of CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187. Notes: All CVE users should reference CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

14 found
  • exploit-databaseremotecgiVerified

    GNU Bash - Environment Variable Command Injection (Metasploit)

    Maturity: weaponized

  • exploit-databasecgiVerified

    Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

    Maturity: poc

  • exploit-databasecgiVerified

    IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection

    Maturity: poc

Show all 14 exploits
  • exploit-databaseremotehardwareUnverified

    QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)

    Maturity: poc

  • exploit-databaseremotehardwareUnverified

    QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

    Maturity: poc

  • exploit-databaseremotelinuxVerified

    Bash - 'Shellshock' Environment Variables Command Injection

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    CUPS Filter - Bash Environment Variable Code Injection (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    GNU Bash - 'Shellshock' Environment Variable Command Injection

    Maturity: weaponized

  • exploit-databaseremotelinuxUnverified

    GNU bash 4.3.11 - Environment Variable dhclient

    Maturity: poc

  • exploit-databaseremotelinuxUnverified

    OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

    Maturity: poc

  • exploit-databaseremotelinuxVerified

    Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

    Maturity: weaponized

  • exploit-databasemultipleUnverified

    Kemp Load Master 7.1.16 - Multiple Vulnerabilities

    Maturity: poc

  • exploit-databasephpUnverified

    PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection

    Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

No affected systems are recorded for this record.

References

0 links

No references have been published for this record.