CVE-2014-2084

CVE-2014-2084 describes a critical access control vulnerability in Skybox View Appliances running specific ISO versions (6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57). This flaw allows unauthenticated remote attackers to access sensitive system and network configuration information, or initiate a denial of service by rebooting or shutting down the appliance. With a CVSS score of 8.5 (AV:N/AC:L/Au:N/C:P/I:N/A:C) and a FAUCET Risk Score of 97/100, this vulnerability is considered highly severe due to its low attack complexity and significant impact on availability and confidentiality. The attack requires no authentication and can be executed remotely. While not listed in CISA's KEV catalog, public exploit code is available on ExploitDB (EDB-33327, EDB-33328), indicating the potential for exploitation. Despite the availability of exploits, there is no evidence of active exploitation, and community discussion and media coverage remain minimal.