{"api_version":"1","generated_at":"2026-07-23T08:12:48+00:00","cve":"CVE-2014-8373","urls":{"html":"https://cve.report/CVE-2014-8373","api":"https://cve.report/api/cve/CVE-2014-8373.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-8373","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-8373"},"summary":{"title":"CVE-2014-8373","description":"The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the \"Connect (by) Using VMRC\" function.","state":"PUBLISHED","assigner":"mitre","published_at":"2014-12-11 15:59:03","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9","severity":"","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html","name":"http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VMware Security Advisory 2014-0013 ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/534186/100/0/threaded","name":"http://www.securityfocus.com/archive/1/534186/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2014/Dec/33","name":"http://seclists.org/fulldisclosure/2014/Dec/33","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Full Disclosure: NEW VMSA-2014-0013 - VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/61169","name":"http://secunia.com/advisories/61169","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA61169 - VMware vCloud Automation Center (vCAC) VMRC Security Bypass Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id/1031323","name":"http://www.securitytracker.com/id/1031323","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VMware vCloud Automation Center Lets Remote Authenticated Users Gain Administrative Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0013.html","name":"http://www.vmware.com/security/advisories/VMSA-2014-0013.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMSA-2014-0013 | United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8373","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8373","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"8373","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"vcloud_automation_center","cpe6":"6.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8373","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"vcloud_automation_center","cpe6":"6.0.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8373","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"vcloud_automation_center","cpe6":"6.0.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8373","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"vcloud_automation_center","cpe6":"6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8373","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"vcloud_automation_center","cpe6":"6.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T13:18:47.564Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20141209 NEW VMSA-2014-0013 - VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2014/Dec/33"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/security/advisories/VMSA-2014-0013.html"},{"name":"61169","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61169"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html"},{"name":"20141209 NEW VMSA-2014-0013 - VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/534186/100/0/threaded"},{"name":"1031323","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1031323"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-12-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the \"Connect (by) Using VMRC\" function."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-09T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20141209 NEW VMSA-2014-0013 - VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2014/Dec/33"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/security/advisories/VMSA-2014-0013.html"},{"name":"61169","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61169"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html"},{"name":"20141209 NEW VMSA-2014-0013 - VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/534186/100/0/threaded"},{"name":"1031323","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1031323"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-8373","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the \"Connect (by) Using VMRC\" function."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20141209 NEW VMSA-2014-0013 - VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2014/Dec/33"},{"name":"http://www.vmware.com/security/advisories/VMSA-2014-0013.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2014-0013.html"},{"name":"61169","refsource":"SECUNIA","url":"http://secunia.com/advisories/61169"},{"name":"http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html"},{"name":"20141209 NEW VMSA-2014-0013 - VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/534186/100/0/threaded"},{"name":"1031323","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1031323"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2014-8373","datePublished":"2014-12-11T15:00:00.000Z","dateReserved":"2014-10-21T00:00:00.000Z","dateUpdated":"2024-08-06T13:18:47.564Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-12-11 15:59:03","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_automation_center:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77F27A7-4608-4C7C-871C-9F6CCD66B5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_automation_center:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3CEBA5F8-89F5-4F68-BEA4-F54D138A2C74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_automation_center:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2A1B9E8D-5EC5-41E3-A6CD-15865E16FD05"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_automation_center:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7AE92D4F-C6A4-418D-AE7D-6DFD0DE83B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcloud_automation_center:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3EEC0DFC-880E-43BF-9B31-EBF6B01AE0BF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"8373","Ordinal":"1","Title":"CVE-2014-8373","CVE":"CVE-2014-8373","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"8373","Ordinal":"1","NoteData":"The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the \"Connect (by) Using VMRC\" function.","Type":"Description","Title":"CVE-2014-8373"},{"CveYear":"2014","CveId":"8373","Ordinal":"2","NoteData":"2014-12-11","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"8373","Ordinal":"3","NoteData":"2018-10-09","Type":"Other","Title":"Modified"}]}}}