CVE-2014-2276

N/A Unknown
Published: March 21, 2014 Modified: May 06, 2026
View on NVD

Description

The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2014-03/0115.html
Source: cve@mitre.org
http://secunia.com/advisories/57513
Source: cve@mitre.org
http://www.securityfocus.com/bid/66308
Source: cve@mitre.org
http://www.securitytracker.com/id/1029939
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/91987
Source: cve@mitre.org
http://archives.neohapsis.com/archives/bugtraq/2014-03/0115.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/57513
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/66308
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id/1029939
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/91987
Source: af854a3a-2127-422b-91ae-364da2661108

10 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.4%
63th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-264

Affected Vendors

emc

Related CVEs

CVE-2026-8696 7.5
CVE-2026-45672 8.8
CVE-2026-45402 8.1
CVE-2026-45401 8.5
CVE-2026-45400 8.5