CVE-2014-3883

UnknownEPSS 1.29%

Last modified

CVE-2014-3883 is a vulnerability of currently unknown severity. Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action.. EPSS estimates a 1.29% chance of exploitation in the next 30 days.

Description

Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action.

Metrics

EPSS Probability
1.29%

66.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
WebminUsermin<= 1.590
WebminUsermin0.4
WebminUsermin0.5
WebminUsermin0.6
WebminUsermin0.7
WebminUsermin0.80
WebminUsermin0.90
WebminUsermin0.910
WebminUsermin0.929
WebminUsermin0.930
WebminUsermin0.940
WebminUsermin0.950
WebminUsermin0.960
WebminUsermin0.970
WebminUsermin0.980
WebminUsermin0.990
WebminUsermin1.000
WebminUsermin1.010
WebminUsermin1.020
WebminUsermin1.030
WebminUsermin1.040
WebminUsermin1.050
WebminUsermin1.051
WebminUsermin1.060
WebminUsermin1.070
WebminUsermin1.080
WebminUsermin1.090
WebminUsermin1.100
WebminUsermin1.110
WebminUsermin1.120
WebminUsermin1.130
WebminUsermin1.140
WebminUsermin1.150
WebminUsermin1.160
WebminUsermin1.170
WebminUsermin1.180
WebminUsermin1.190
WebminUsermin1.200
WebminUsermin1.210
WebminUsermin1.220
WebminUsermin1.230
WebminUsermin1.240
WebminUsermin1.250
WebminUsermin1.260
WebminUsermin1.270
WebminUsermin1.280
WebminUsermin1.290
WebminUsermin1.300
WebminUsermin1.310
WebminUsermin1.320

Showing 50 of 76 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2014-3883?
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action.
How severe is CVE-2014-3883?
Severity scoring for CVE-2014-3883 is pending analysis. The EPSS model estimates a 1.29% probability of exploitation in the next 30 days.
How do I fix CVE-2014-3883?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-3883?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST