CVE-2014-3008

CVE-2014-3008 is a critical remote code execution vulnerability affecting Unitrends Enterprise Backup version 7.3.0, allowing authenticated attackers to execute arbitrary commands via shell metacharacters in the comm parameter of the snmpd.php script. With a CVSS score of 10.0, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, a Metasploit module for this vulnerability is publicly available on ExploitDB, indicating readily accessible exploit code. Despite the high severity and public exploit, there is no evidence of active exploitation, nor significant community discussion or media coverage.