/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration.
📦
vyatta_5400_vrouter_software
Vendor: brocade
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
1
Remote Access
Total CVEs
12
Total Indexed
Avg. EPSS
1.41%
Exploit Prob.
Security Vulnerability Index
Page 1 / 2
7.2
CVSS
Severity: HIGH
5.0
CVSS
The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group.
Severity: MEDIUM
9.0
CVSS
CVE-2014-4868
RCE
The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command.
Severity: HIGH