CVE-2014-2356 - CVE House

Status published Medium CVE-2014-2356

Innominate mGuard Exposure of Sensitive Information to an Unauthorized Actor

4.3 CVSS

Vulnerability Description

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2356

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Applied Risk Research team

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-189-02

More from Innominate

View All →

CVE-2014-9193

Innominate mGuard Improper Privilege Management

High 8.5

Affected Vendor

Innominate

View all reports →

Affected Software

mGuard

Vulnerable Versions:

4.0.0, 7.6.4, 8.0.3, 8.1.0, 8.1.1

Timeline

Official Publish: July 30th, 2014

Last Modified: October 3rd, 2025

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

Collection

T1005 Data from Local System