CVE-2014-125001

Name of the Vulnerable Software and Affected Versions Cardo Systems Scala Rider Q3 (affected versions not specified)

Description A critical issue has been discovered, allowing unauthenticated remote code execution with root permissions. This is related to the file /cardo/api of the Cardo-Updater.

Recommendations For Cardo Systems Scala Rider Q3, consider firewalling or disabling the service as a mitigation measure until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.