CVE-2014-9577

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.76%

Published

Jan 8, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VDG Security SENSE (formerly DIVA) 2.3.13 sends the user database when a user logs in, which allows remote authenticated users to obtain usernames and password hashes by logging in to TCP port 51410 and reading the response.

Weaknesses (CWE)

CWE-200

Affected Products (1)

vdgsecurity · vdg_sensevulnerable

References (6)

http://packetstormsecurity.com/files/129656/VDG-Security-SENSE-2.3.13-File-Disclosure-Bypass-Buffer-Overflow.html

Exploit

http://seclists.org/fulldisclosure/2014/Dec/76

Exploit

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20141218-0_VDG_Security_SENSE_Multiple_critical_vulnerabilities_v10.txt

Exploit

http://packetstormsecurity.com/files/129656/VDG-Security-SENSE-2.3.13-File-Disclosure-Bypass-Buffer-Overflow.html

Exploit

http://seclists.org/fulldisclosure/2014/Dec/76

Exploit

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20141218-0_VDG_Security_SENSE_Multiple_critical_vulnerabilities_v10.txt

Exploit

KEV Catalog EPSS Scores Vendors All CVEs