What’s Vulnerable › Vulnerabilities

CVE-2014-4870

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-10-07 · updated 2026-06-17
• Weakness: CWE-20

Description

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration.

Affected products

• Brocade Vyatta 5400 Vrouter: all versions
• Brocade Vyatta 5400 Vrouter Software: 6.4, 6.6, 6.7

References

• http://www.kb.cert.org/vuls/id/111588
• http://www.kb.cert.org/vuls/id/111588

Get alerted when CVE-2014-4870 or the next vulnerability affects your stack