VULNERABILITY INTELLIGENCE
CVE-2014-2626
CVSS score9.4 HIGH
EPSS probability19.41%
CISA KEVNot currently listed
Published2014-07-26
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:N
Description
Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')