ByteOS Network

NVD Vulnerability Details :

CVE-2014-125001

Analyzed

Source-cna@vuldb.com

Published At-24 May, 2022 | 16:15

Updated At-08 Jun, 2022 | 14:19

A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	8.3	HIGH	AV:A/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cardosystems>>scala_rider_q3_firmware>>-

cpe:2.3:o:cardosystems:scala_rider_q3_firmware:-:*:*:*:*:*:*:*

cardosystems>>scala_rider_q3>>-

cpe:2.3:h:cardosystems:scala_rider_q3:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-269	Primary	nvd@nist.gov
CWE-269	Secondary	cna@vuldb.com

References

Hyperlink	Source	Resource
http://www.remote-exploit.org/archives/2014/06/03/ride_with_the_devil/	cna@vuldb.com	Exploit Third Party Advisory
https://vuldb.com/?id.13428	cna@vuldb.com	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History