CVE-2014-3789
HighPublic exploitGetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
Published May 22, 2014 · Updated May 6, 2026
Key Facts
Patch immediately- CVE-2014-3789 is a high-severity vulnerability (CVSS 7.5 v2) affecting Cogent Datahub (Cogentdatahub).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 63% probability of exploitation in the next 30 days.
- Fixed versions are available, including Cogent Datahub 7.3.4.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v2
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (30-day exploit likelihood)
63%
Higher than 99.2% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2014-3789 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected Products
12 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Cogent DatahubCogentdatahub | 7.0, 7.0.2, 7.1.0, 7.1.1, 7.1.1.63, 7.1.2, 7.2.2, 7.3.0 | 7.3.4 |
Patched Releases
Cogent Datahub
7.3.4
Timeline
Publicly disclosed
May 22, 2014
Last updated
May 6, 2026
Weakness Type
- CWE-94 Improper Control of Generation of Code ('Code Injection')
References
- patchhttp://cogentdatahub.com/ReleaseNotes.html
- exploitMSF cogent_datahub_command.rb
- exploitExploitDB-33880
- otherhttps://ics-cert.us-cert.gov/advisories/ICSA-15-246-01
- other67486
FAQ
Common Questions.
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected: Cogent Datahub (Cogentdatahub) versions 7.0, 7.0.2, 7.1.0, 7.1.1, 7.1.1.63, 7.1.2, 7.2.2, 7.3.0. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Cogent Datahub 7.3.4.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2014-3789 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo