CVE-2014-4867: Cryoserver Security Appliance

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program.

Affected products

• Cryoserver Cryoserver Security Appliance: version 7.3.0 only; version 7.3.1 only; version 7.3.2 only; version 7.3.3 only; version 7.3.4 only

Published 2014-10-10. Last modified 2026-06-17.