CVE-2014-9610

CVE-2014-9610 describes an authentication bypass vulnerability in Netsweeper versions prior to 3.1.10, 4.0.9, and 4.1.2. This flaw allows an unauthenticated remote attacker to remove IP addresses from quarantine by manipulating the 'ip' parameter in the webadmin/user/quarantine_disable.php script. Rated Medium severity (CVSS 5.3), the vulnerability has a low attack complexity and requires no user interaction, potentially leading to unauthorized network access. While not on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.