CVE-2014-7196

CVSS: UnknownRejected
Published 15-02-2015Last modified 15-02-2015
Open JSON

Vulnerability summary

CVE-2014-7196 is a vulnerability with no CVSS score yet. 15 public exploits are recorded.

Overall risk
10/100
0100
Low · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits15exploit-database

Timeline

  1. 15-02-2015
    PublishedVulnerability first disclosed.
  2. 15-02-2015
    Last modifiedVulnerability information updated.

Description

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-7169. Reason: This candidate is a duplicate of CVE-2014-7169. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-7169 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

15 found
  • exploit-databaseremotecgiVerified

    Advantech Switch - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotecgiVerified

    GNU Bash - Environment Variable Command Injection (Metasploit)

    Maturity: weaponized

  • exploit-databasecgiVerified

    Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

    Maturity: poc

Show all 15 exploits
  • exploit-databasecgiVerified

    IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection

    Maturity: poc

  • exploit-databaseremotehardwareUnverified

    QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)

    Maturity: poc

  • exploit-databaseremotehardwareUnverified

    QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

    Maturity: poc

  • exploit-databaseremotelinuxVerified

    Bash - 'Shellshock' Environment Variables Command Injection

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    CUPS Filter - Bash Environment Variable Code Injection (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    GNU Bash - 'Shellshock' Environment Variable Command Injection

    Maturity: weaponized

  • exploit-databaseremotelinuxUnverified

    GNU bash 4.3.11 - Environment Variable dhclient

    Maturity: poc

  • exploit-databaseremotelinuxUnverified

    OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

    Maturity: poc

  • exploit-databaseremotelinuxVerified

    Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

    Maturity: weaponized

  • exploit-databasemultipleUnverified

    Kemp Load Master 7.1.16 - Multiple Vulnerabilities

    Maturity: poc

  • exploit-databasephpUnverified

    PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection

    Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

No affected systems are recorded for this record.

References

0 links

No references have been published for this record.