Back to the CVE list
CVE-2014-7169 CISA KEV · Actively exploited

bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)

CVSS score

5.1

EPSS probability

%99.9

Risk score

10.2

Published

12 y ago

OverviewPublic Exploits (18)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

E
Kemp Load Master 7.1.16 - Multiple Vulnerabilities
Exploit-DB

Kemp Load Master 7.1.16 - Multiple Vulnerabilities

Exploit referenceSource updated: 02.04.2015 00:00:00
E
QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)
Exploit-DB

QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)

Exploit referenceSource updated: 26.03.2015 00:00:00
E
QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)
Exploit-DB

QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

Exploit referenceSource updated: 26.03.2015 00:00:00
E
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
Exploit-DB

PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection

Exploit referenceSource updated: 03.11.2014 00:00:00
E
CUPS Filter - Bash Environment Variable Code Injection (Metasploit)
Exploit-DB

CUPS Filter - Bash Environment Variable Code Injection (Metasploit)

Exploit referenceSource updated: 29.10.2014 00:00:00
E
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
Exploit-DB

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

Exploit referenceSource updated: 06.10.2014 00:00:00
E
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
Exploit-DB

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

Exploit referenceSource updated: 06.10.2014 00:00:00
E
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

Exploit referenceSource updated: 04.10.2014 00:00:00
E
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
Exploit-DB

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

Exploit referenceSource updated: 02.10.2014 00:00:00
E
GNU bash 4.3.11 - Environment Variable dhclient
Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

Exploit referenceSource updated: 02.10.2014 00:00:00
E
IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection
Exploit-DB

IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection

Exploit referenceSource updated: 01.10.2014 00:00:00
E
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
Exploit-DB

dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)

Exploit referenceSource updated: 29.09.2014 00:00:00
E
GNU Bash - 'Shellshock' Environment Variable Command Injection
Exploit-DB

GNU Bash - 'Shellshock' Environment Variable Command Injection

Exploit referenceSource updated: 25.09.2014 00:00:00
E
GNU Bash - Environment Variable Command Injection (Metasploit)
Exploit-DB

GNU Bash - Environment Variable Command Injection (Metasploit)

Exploit referenceSource updated: 25.09.2014 00:00:00
E
Bash - 'Shellshock' Environment Variables Command Injection
Exploit-DB

Bash - 'Shellshock' Environment Variables Command Injection

Exploit referenceSource updated: 25.09.2014 00:00:00
G
ajansha/shellshock
GitHub

Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock (CVE-2014-6271 & CVE-2014-7169) vulnerabilities in Bash environments.

Public PoC
G
gina-alaska/bash-cve-2014-7169-cookbook
GitHub

gina-alaska/bash-cve-2014-7169-cookbook

Public PoC
G
Kushiro45/shellshock-poc-cve-2014-7169
GitHub

This contains the Dockerfile for building and reproduing shellshock

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2014-7169"