VULNERABILITY INTELLIGENCE
CVE-2014-2276
CVSS score5 MEDIUM
EPSS probability2.07%
CISA KEVNot currently listed
Published2014-03-21
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file.