CVE-2014-9921

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

VendorProductVersions
IntelCloud Analysis and Deconstructive Services (CADS)1.0.0.3x, 1.0.0.4d and earlier

References

Timeline

Published
Mar 14, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-99227.8The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an oCVE-2014-99237.8In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentiallyCVE-2014-99247.8In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.CVE-2014-99257.8In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentiallyCVE-2014-99267.8In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.CVE-2014-99277.8In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentiallyCVE-2014-99287.8In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentialCVE-2014-99297.8In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially existCVE-2014-99307.8In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.CVE-2014-99317.8A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app regiCVE-2014-99327.8In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an imprCVE-2014-99337.8Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not hav
CVE-2014-9921: Critical severity, CVSS 9.8 | Vulnix