← Back to CVE List
Vulnerability Analysis

CVE-2014-6287

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.

CISA KEV Nuclei Template
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
Temporal Score:-
EPSS:99.32%

Threat Intelligence Signals

CISA KEV
YES
KEV Date Added
2022-03-25
Ransomware Use
Unknown
KEV Due Date
2022-04-15
VulnCheck In-the-Wild
No
Nuclei Template
YES
EPSS Score
99.323%
EPSS Percentile
99.9th pct
GitHub Severity
CRITICAL
SSVC Exploitation
SSVC Automatable
Vulnerability Class

Identity & Timeline

Status-
Assigning Authority-
CVSS Version / Source-
Reserved-
Published-
Patch Date (date_public)-
Exploit DB Date-
First GitHub PoC Date-
Last Updated-
Time to Patch (Days to fix)-
Exploit Release Gap-
PoC Release Gap-
Exploit DB ReferencesNone identified

Affected Products & Versions

Vendor Product Affected Versions
No affected products specified.

References

No reference links found.

LINK COPIED TO CLIPBOARD