CVE-2014-3804

CVE-2014-3804 is a critical command injection vulnerability affecting the av-centerd SOAP service in AlienVault OSSIM versions prior to 4.7.0. This flaw allows unauthenticated remote attackers to execute arbitrary commands on the affected system through specially crafted requests to various service functions. With a CVSS score of 10.0, this vulnerability presents an extremely high risk, enabling complete compromise of confidentiality, integrity, and availability without requiring any authentication or complex attack techniques. While not listed in CISA KEV, exploit modules are readily available in Metasploit and ExploitDB, indicating a high potential for exploitation, though there is no evidence of widespread active exploitation or significant community discussion.