NVD

Id
31837  
Name
CVE-2014-3686  
Description
wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-15  
Modified Date
2016-07-26  
Seq
2014-3686  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167841 31837 CVE-2014-3686 http://advisories.mageia.org/MGASA-2014-0429.html  View
167842 31837 CVE-2014-3686 SUSE-SU-2014:1356  View
167843 31837 CVE-2014-3686 openSUSE-SU-2014:1313  View
167844 31837 CVE-2014-3686 openSUSE-SU-2014:1314  View
167845 31837 CVE-2014-3686 RHSA-2014:1956  View
167846 31837 CVE-2014-3686 http://w1.fi/security/2014-1/  View
167847 31837 CVE-2014-3686 DSA-3052  View
167848 31837 CVE-2014-3686 MDVSA-2015:120  View
167849 31837 CVE-2014-3686 [oss-security] 20141009 wpa_cli and hostapd_cli action script execution vulnerability  View
167850 31837 CVE-2014-3686 70396  View
167851 31837 CVE-2014-3686 USN-2383-1  View
167852 31837 CVE-2014-3686 https://bugzilla.redhat.com/show_bug.cgi?id=1151259  View
167853 31837 CVE-2014-3686 GLSA-201606-17  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16174 JVNDB-2014-005049 wpa_supplicant および hostapd における任意のコマンドを実行される脆弱性 wpa_supplicant および hostapd には、アクションスクリプトで wpa_cliまたは hostapd_cli を使用し、特定の設定で実行する場合、任意のコマンドを実行される脆弱性が存在します。 CVE-2014-3686 70974 CVE-2014-3686 31837 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005049.html 2014-10-09 2015-06-23 View