Industrial Cybersecurity Threat Briefing

boozallen.com · Undated · Licence: not cleared; local research copy only

CVEs this report names

6 CVEs

CVE-2014-4114Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
Microsoft · WindowsKEVPublic exploitHigh · 7.8T1204.002Malicious File T1059Command and Scripting Interpreter4 reports
81.6%Top 0.36%
77.4priority
CVE-2014-6271GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU · Bourne-Again Shell (Bash)KEVPublic exploitCritical · 9.8T1133External Remote Services T1190Exploit Public-Facing Application+1 more · 2 reports
>99.9%Top 0.01%
76.0priority
CVE-2014-6278GNU Bash OS Command Injection Vulnerability
GNU · GNU BashKEVPublic exploitHigh · 8.8T1059.004Unix Shell1 report
99.7%Top 0.05%
73.0priority
CVE-2014-6277GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables…
Public exploit1 report
64.3%Top 0.77%
64.4priority
CVE-2014-7186The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial…
Public exploit1 report
64.3%Top 0.77%
63.7priority
CVE-2014-7187Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers…
Public exploit1 report
60.3%Top 0.86%
63.7priority

exploited a zero-day vulnerability (CVE-2014-4114)

Stephen Ward, “iSIGHT discovers zero-day vulnerability CVE-2014-4114 used in Russian cyber-espionage campaign,” iSight -

Partners, October 14, 2014, accessed August 15, 2016, hxxps://www.isightpartners.com/2014/10/cve-2014-4114/.

Stephen Ward, “iSIGHT discovers zero-day vulnerability CVE-2014-4114 used in Russian cyber-espionage campaign,” iSight -

Partners, October 14, 2014, accessed August 15, 2016, hxxps://www.isightpartners.com/2014/10/cve-2014-4114/.

“Vulnerability Summary for CVE-2014-6271,” National Vulnerability Database, September 24, 2014, modified June 28, 2016,

accessed July 14, 2016, hxxps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271.

“Vulnerability Summary for CVE-2014-6278,” National Vulnerability Database, September 30, 2014, modified June 14, 2016,

accessed July 14, 2016, hxxps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6278.

“Vulnerability Summary for CVE-2014-6277,” National Vulnerability Database, September 28, 2014, modified October 9,

2015, accessed July 14, 2016, hxxps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6277.

Vulnerability Summary for CVE-2014-7186,” National Vulnerability Database, September 28, 2014, modified October 9,

2015, accessed July 14, 2016, hxxps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7186.

“Vulnerability Summary for CVE-2014-7187,” National Vulnerability Database, September 28, 2014, modified October 9,

2015, accessed July 14, 2016, hxxps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7187.

None

No passage in this report has been tied to an ATT&CK technique.