CVE-2014-7180: Electric Cloud Electriccommander

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for (1) eccert.pl and (2) ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files.

Affected products

• Electric Cloud Electriccommander: up to and including 4.2.5; version 5.0.0 only; version 5.0.1 only; version 5.0.2 only

Published 2014-10-25. Last modified 2026-06-17.