CVE-2014-125001 — Cardo Systems Scala Rider Q3 Cardo-Updater api privileges management

CVE-2014-125001

Cardo Systems Scala Rider Q3 Cardo-Updater api privileges management PUBLISHED

Description (CNA)

A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended.

Affected (CNA)

Vendor / product	Versions
Cardo Systems / Scala Rider Q3	affected n/a

CWE

CWE-269

References

http://www.remote-exploit.org/archives/2014/06/03/ride_with_the_devil/
https://vuldb.com/?id.13428

ADP enrichment

CVE

No English description supplied.

http://www.remote-exploit.org/archives/2014/06/03/ride_with_the_devil/
https://vuldb.com/?id.13428

CISA-ADP

No English description supplied.

No references supplied.