CVE Vulnerabilities

CVE-2014-9193

Improper Privilege Management

Published: Dec 20, 2014 | Modified: Jul 28, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9 HIGH
AV:N/AC:L/Au:S/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Mguard_firmware Innominate * 7.6.6 (including)
Mguard_firmware Innominate 8.0.0 (including) 8.0.0 (including)
Mguard_firmware Innominate 8.0.1 (including) 8.0.1 (including)
Mguard_firmware Innominate 8.0.2 (including) 8.0.2 (including)
Mguard_firmware Innominate 8.0.3 (including) 8.0.3 (including)
Mguard_firmware Innominate 8.1.1 (including) 8.1.1 (including)
Mguard_firmware Innominate 8.1.2 (including) 8.1.2 (including)
Mguard_firmware Innominate 8.1.3 (including) 8.1.3 (including)

Potential Mitigations

References