Unrated severityNVD Advisory· Published Jul 26, 2014· Updated May 6, 2026

CVE-2014-2626

Description

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024.

Affected products

HP/Network Virtualization
cpe:2.3:a:hp:network_virtualization:8.6:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplaynvdVendor Advisory
secunia.com/advisories/60418nvd
www.securitytracker.com/id/1030624nvd
zerodayinitiative.com/advisories/ZDI-14-268/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.032
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000