CVE-2014-1671 - CVE House
Back to Database
Status published Medium CVE-2014-1671

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and...

Vulnerability Description

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a (1) getUploadPath or (2) getKBot SOAP request to service/kbot_service.php; the ID parameter to (3) userui/advisory_detail.php or (4) userui/ticket.php; and the (5) ORDER[] parameter to userui/ticket_list.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-1671

Credits & Attribution

No credits recorded in the NVD database.

References

More from dell

View All →
CVE-2019-19620
In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local...
Low 3.3
CVE-2018-1207
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection...
Critical 9.8
CVE-2018-15769
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in...
High 7.5
CVE-2018-15748
On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine...
High 8.8
CVE-2017-2802
An exploitable dll hijacking vulnerability exists in the poaService.exe service...
High 7.8

Affected Vendor

Affected Software

kace k1000 systems management appliance software, kace k1000 systems management virtual appliance, kace k1000 systems management appliance, kace k1100s systems management appliance, kace k1200s systems management appliance
Vulnerable Versions:
5.4.76847

Timeline

Official Publish: January 26th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.