Back to the CVE list
CVE-2014-6271 CISA KEV · Actively exploited

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

4 y ago

OverviewPublic Exploits (22)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

E
Qmail SMTP - Bash Environment Variable Injection (Metasploit)
Exploit-DB

Qmail SMTP - Bash Environment Variable Injection (Metasploit)

Exploit referenceSource updated: 02.10.2017 00:00:00
E
RedStar 3.0 Server - 'Shellshock' 'BEAM' / 'RSSMON' Command Injection
Exploit-DB

RedStar 3.0 Server - 'Shellshock' 'BEAM' / 'RSSMON' Command Injection

Exploit referenceSource updated: 18.12.2016 00:00:00
E
TrendMicro InterScan Web Security Virtual Appliance - 'Shellshock' Remote Command Injection
Exploit-DB

TrendMicro InterScan Web Security Virtual Appliance - 'Shellshock' Remote Command Injection

Exploit referenceSource updated: 21.10.2016 00:00:00
E
IPFire - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)
Exploit-DB

IPFire - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)

Exploit referenceSource updated: 10.06.2016 00:00:00
E
Advantech Switch - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)
Exploit-DB

Advantech Switch - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)

Exploit referenceSource updated: 02.12.2015 00:00:00
E
Cisco Unified Communications Manager - Multiple Vulnerabilities
Exploit-DB

Cisco Unified Communications Manager - Multiple Vulnerabilities

Exploit referenceSource updated: 18.08.2015 00:00:00
E
Kemp Load Master 7.1.16 - Multiple Vulnerabilities
Exploit-DB

Kemp Load Master 7.1.16 - Multiple Vulnerabilities

Exploit referenceSource updated: 02.04.2015 00:00:00
E
QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)
Exploit-DB

QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)

Exploit referenceSource updated: 26.03.2015 00:00:00
E
QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)
Exploit-DB

QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

Exploit referenceSource updated: 26.03.2015 00:00:00
E
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
Exploit-DB

PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection

Exploit referenceSource updated: 03.11.2014 00:00:00
E
CUPS Filter - Bash Environment Variable Code Injection (Metasploit)
Exploit-DB

CUPS Filter - Bash Environment Variable Code Injection (Metasploit)

Exploit referenceSource updated: 29.10.2014 00:00:00
E
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
Exploit-DB

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

Exploit referenceSource updated: 06.10.2014 00:00:00
E
Apache mod_cgi - 'Shellshock' Remote Command Injection
Exploit-DB

Apache mod_cgi - 'Shellshock' Remote Command Injection

Exploit referenceSource updated: 06.10.2014 00:00:00
E
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
Exploit-DB

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

Exploit referenceSource updated: 06.10.2014 00:00:00
E
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

Exploit referenceSource updated: 04.10.2014 00:00:00
E
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
Exploit-DB

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

Exploit referenceSource updated: 02.10.2014 00:00:00
E
GNU bash 4.3.11 - Environment Variable dhclient
Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

Exploit referenceSource updated: 02.10.2014 00:00:00
E
IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection
Exploit-DB

IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection

Exploit referenceSource updated: 01.10.2014 00:00:00
E
GNU Bash - 'Shellshock' Environment Variable Command Injection
Exploit-DB

GNU Bash - 'Shellshock' Environment Variable Command Injection

Exploit referenceSource updated: 25.09.2014 00:00:00
E
GNU Bash - Environment Variable Command Injection (Metasploit)
Exploit-DB

GNU Bash - Environment Variable Command Injection (Metasploit)

Exploit referenceSource updated: 25.09.2014 00:00:00
E
Bash - 'Shellshock' Environment Variables Command Injection
Exploit-DB

Bash - 'Shellshock' Environment Variables Command Injection

Exploit referenceSource updated: 25.09.2014 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6271.yaml
Nuclei

Nuclei: ShellShock - Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2014-6271"