CVE-2014-7196
rejectedpriority · track · 10exploit · functionalRejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-7169. Reason: This candidate is a duplicate of CVE-2014-7169. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-7169 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
cvss
Technical severity, 0–10. One row per scoring source.
No CVSS score recorded.
weaknesses
The CWE weakness classes this flaw belongs to.
No weakness (CWE) mapping recorded.
exploits (15)
Public proof-of-concept and weaponised exploit code.
- EDB-34765GNU Bash - 'Shellshock' Environment Variable Command Injectionfunctional · exploit_db
- EDB-34766Bash - 'Shellshock' Environment Variables Command Injectionfunctional · exploit_db
- EDB-34777GNU Bash - Environment Variable Command Injection (Metasploit)functional · exploit_db
- EDB-34839IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injectionfunctional · exploit_db
- EDB-34895Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)functional · exploit_db
affected products
Products and version ranges known to be affected.
No affected products recorded.
also known as (1)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references
External citations — patches, advisories, analysis.
No references recorded.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan