Unrated severityNVD Advisory· Published Feb 18, 2014· Updated Jun 17, 2026

CVE-2014-1861

Description

The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP_FILE_TRANSFER document, which allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jetroplatforms/Jetro Cockpit Secure Browsing2 versions
cpe:2.3:a:jetroplatforms:jetro_cockpit_secure_browsing:4.3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jetroplatforms:jetro_cockpit_secure_browsing:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:jetroplatforms:jetro_cockpit_secure_browsing:4.3.3:*:*:*:*:*:*:*
Jetro COCKPIT/Secure Browsingllm-fuzzy
Range: = 4.3.1 and 4.3.3

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/bugtraq/2014-02/0075.htmlnvd
blog.quaji.com/2014/02/remote-code-execution-on-all-enterprise.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000