What’s Vulnerable › Vulnerabilities

CVE-2014-2625

• Severity: high (CVSS 8.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-07-26 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023.

Affected products

• HP Network Virtualization: 8.6

References

• http://secunia.com/advisories/60418
• http://www.securitytracker.com/id/1030624
• http://zerodayinitiative.com/advisories/ZDI-14-267/
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04374202
• http://secunia.com/advisories/60418
• http://www.securitytracker.com/id/1030624
• http://zerodayinitiative.com/advisories/ZDI-14-267/
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04374202

Get alerted when CVE-2014-2625 or the next vulnerability affects your stack