Unrated severityNVD Advisory· Published Mar 21, 2014· Updated Jun 17, 2026

CVE-2014-2276

Description

The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file.

Affected products

EMC Corporation/Connectrix Manager
cpe:2.3:a:emc:connectrix_manager:*:-:-:*:converged_network_edition:*:*:*
Range: <=12.1.2
EMC Corporation/Connectrix Manager Converged Network Editionllm-fuzzy
Range: <12.1.5

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/bugtraq/2014-03/0115.htmlnvd
secunia.com/advisories/57513nvd
www.securityfocus.com/bid/66308nvd
www.securitytracker.com/id/1029939nvd
exchange.xforce.ibmcloud.com/vulnerabilities/91987nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000