CVE-2014-8741

Опубликовано: 27 янв. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Высокий

Описание

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors.

Ссылки

http://support.lexmark.com/index?page=content&id=TE666
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-14-410/
Third Party Advisory
VDB Entry
http://support.lexmark.com/index?page=content&id=TE666
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-14-410/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lexmark:markvision_enterprise:*:*:*:*:*:*:*:*

Версия до 2.1 (исключая)

EPSS

Процентиль: 99%

0.7035

Высокий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-hj63-272c-h8gw