CVE-2014-2950: Datum Systems SnIP on PSM-500 and PSM-4500 devices does not require authentication for FTP sessions, which...

Security readout for executives and security teams

This CVE describes Datum Systems SnIP on PSM-500 and PSM-4500 devices allowing FTP access without authentication. A remote attacker could retrieve sensitive information from affected systems. The public source bundle does not provide CVSS scoring, confirmed exploitation, or a vendor fix. Exposure is most likely where Datum Systems PSM-500 or PSM-4500 devices running SnIP have FTP reachable from untrusted networks. Asset confirmation is important because the CVE metadata lists affected vendor and product as unavailable. Prioritize identification and network restriction for affected devices, especially if they support critical communications or are internet reachable. Urgency is tempered by missing exploitation and patch evidence, but unauthenticated data access is a meaningful business risk. Mitigation focus: Inventory PSM-500 and PSM-4500 devices running Datum Systems SnIP.; Restrict FTP access to trusted management networks only.; Disable FTP if it is not operationally required..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.