What’s Vulnerable › Vulnerabilities

CVE-2014-2356: Innominate mGuard Exposure of Sensitive Information to an Unauthorized Actor

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-07-30 · updated 2026-06-17
• Weakness: CWE-200

Description

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.

Affected products

• Innominate mGuard: through 7.5.0; 4.0.4, 4.1.1, 4.2.3, 5.0.1, 5.1.6, 6.0.2 (+9)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-14-189-02
• http://ics-cert.us-cert.gov/advisories/ICSA-14-189-02

Get alerted when CVE-2014-2356 or the next vulnerability affects your stack