CVE-2014-2625

HIGH 8.5CVE-2014-2625 · Published 26/07/2014 · updated 17/06/2026

In short

CVE-2014-2625 is a HIGH (CVSS 8.5) vulnerability affecting network virtualization (hp).
Chance of exploitation in the next 30 days (EPSS): 9.9%, higher than 95.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
network virtualization hp	`= 8.6`	No fix yet

Description

Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023.

References

secunia.com/advisories/60418
securitytracker.com/id/1030624
zerodayinitiative.com/advisories/ZDI-14-267
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay · Vendor Advisory

More vulnerabilities in network virtualization

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free