CVE-2014-2352

The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable an attacker to access a limited number of hardcoded file types. Further exploitation of this vulnerability may allow an attacker to cause the web server component to enter a denial-of-service condition.

• CWE-22
• CWE-22

• http://cogentdatahub.com/Download_Software.html
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02
• http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02US Government Resource

Published

May 30, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2345COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 t…
• CVE-2014-2346COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 t…
• CVE-2014-2347Amtelco miSecureMessages (aka MSM) 6.2 does not properly man…
• CVE-2014-2349Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded…
• CVE-2014-2350Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded…
• CVE-2014-2351SQL injection vulnerability in the LiveData service in CSWor…
• CVE-2014-2353Cross-site scripting (XSS) vulnerability in Cogent DataHub b…
• CVE-2014-2354Cogent DataHub before 7.3.5 does not use a salt during passw…
• CVE-2014-2355The (1) CimView and (2) CimEdit components in GE Proficy HMI…
• CVE-2014-2356Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not…
• CVE-2014-2357The GPT library in the Telegyr 8979 Master Protocol applicat…
• CVE-2014-2358Multiple cross-site request forgery (CSRF) vulnerabilities i…