VULNERABILITY INTELLIGENCE

CVE-2015-3446

CVSS score9.3 HIGH
EPSS probability2.38%
CISA KEVNot currently listed
Published2015-05-01
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references