Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
Back

CVE-2014-2354

Cogent DataHub Use of Password Hash With Insufficient Computational Effort

Description

Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Timeline

  1. ID reserved

    By icscert

  2. · 3 months later

    Published

  3. · 11 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2014-2354, by who scored it
Scored byCVSSScoreVector
icscertCNA (assigner)2.0Medium6.0AV:L/AC:H/Au:S/C:C/I:C/A:C
NVDNVD · Modified2.0Medium5.0AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS (exploitation in 30 days)
0.69% · top 47% of all CVEs (10 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.0.

Affected products

What to do

Solution: Cogent Real-Time Systems, Inc. has produced a new version of the Cogent DataHub application, Version 7.3.5, that fixes three of the four identified vulnerabilities. The updated version is available at the following address: http://cogentdatahub.com/Download_Software.html Cogent has indicated that it will not be fixing the cryptographic weaknesses of hashed usernames and passwords because of compatibility issues with existing systems. Cogent and the researcher agree that an effective mitigation strategy for users is to select sufficiently strong passwords. Cogent has indicated that password hashes can be checked for strength using sites such as: https://crackstation.net/ .

References

3

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2014-2354 badge
[![CVE-2014-2354](https://cveledger.app/badge/CVE-2014-2354.svg)](https://cveledger.app/cve/CVE-2014-2354)

Record last updated .