CVE-2014-2276

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-21 · updated 2026-06-17
Weakness: CWE-264

Description

The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file.

Affected products

EMC Connectrix Manager: through 12.1.2

References

http://archives.neohapsis.com/archives/bugtraq/2014-03/0115.html
http://secunia.com/advisories/57513
http://www.securityfocus.com/bid/66308
http://www.securitytracker.com/id/1029939
https://exchange.xforce.ibmcloud.com/vulnerabilities/91987
http://archives.neohapsis.com/archives/bugtraq/2014-03/0115.html
http://secunia.com/advisories/57513
http://www.securityfocus.com/bid/66308
http://www.securitytracker.com/id/1029939
https://exchange.xforce.ibmcloud.com/vulnerabilities/91987

Get alerted when CVE-2014-2276 or the next vulnerability affects your stack