CVE-2014-3889

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity outage) via crafted data in the Options field of a TCP header, a different vulnerability than CVE-2014-3890.

• CWE-20

• http://jvn.jp/en/jp/JVN85571806/index.htmlPatch, Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000065Patch, Vendor Advisory
• http://jvn.jp/en/jp/JVN85571806/index.htmlPatch, Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000065Patch, Vendor Advisory

Published

Jul 2, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3883Usermin before 1.600 allows remote attackers to execute arbi…
• CVE-2014-3884Cross-site scripting (XSS) vulnerability in Usermin before 1…
• CVE-2014-3885Cross-site scripting (XSS) vulnerability in Webmin before 1.…
• CVE-2014-3886Cross-site scripting (XSS) vulnerability in Webmin before 1.…
• CVE-2014-3887Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE …
• CVE-2014-3888Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa C…
• CVE-2014-3890silex SX-2000WG devices with firmware before 1.5.4 allow rem…
• CVE-2014-3891Buffer overflow in RimArts Becky! Internet Mail before 2.68 …
• CVE-2014-3892Cross-site scripting (XSS) vulnerability in Nexa Meridian be…
• CVE-2014-3893Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-3894Cross-site scripting (XSS) vulnerability in PHP Kobo Multifu…
• CVE-2014-3895The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier,…