$ cve CVE-2014-3804 JSON

CVE-2014-3804 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 72.4% (pctl 99)

Patch early

A public exploit exists.

Description

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a different vulnerability than CVE-2014-3805.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	72.38% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-94
On CISA KEV	no
Public exploit	yes
Published	2014-06-13
Last modified	2026-06-17

Affected (1)

Vendor	Product
alienvault	open source security information management

Public exploits

Source	Title	Date
exploit-db	Alienvault OSSIM av-centerd - Util.pm sync_rserver Command Execution (Metasploit)	2017-09-13
exploit-db	Alienvault Open Source SIEM (OSSIM) - av-centerd Command Injection (Metasploit)	2014-06-24

References

→ the Explorer · watch your stack · NVD