CVE-2014-8516: Visual Mining NetCharts Server unrestricted file upload enables remote code execution

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

critical priorityCVSS 9.8 with no authentication or interaction required, very high EPSS, and a public exploit reference make this a high-risk remote code execution flaw.

What it is

Visual Mining NetCharts Server accepts uploaded files without restricting their extension, so an attacker can upload a file with an executable extension and then access it to run code. The flaw is remotely reachable with no authentication or user interaction, and the record gives no affected version range or fixed release. It matters because successful exploitation yields full code execution on the server.

Impact

An attacker gains arbitrary code execution on the NetCharts Server host, with high impact to confidentiality, integrity and availability. This can lead to full server compromise and use of the host as a foothold in the network.

Attack surface

Reached over the network via the server's file upload functionality, per the CVSS vector AV:N/AC:L/PR:N/UI:N. No authentication or user interaction is required, though the record does not name the specific upload endpoint or access path.

Exploitation

Not listed in CISA KEV, but EPSS is very high at 0.8168 (99.6th percentile) and a public exploit reference exists on Packet Storm. No ransomware group is documented as using it.

What to do

• Apply the vendor fix or upgrade to a supported NetCharts Server release; the record does not specify a patched version, so confirm with the vendor.
• If no patch is available, restrict or disable the file upload feature and block access to uploaded files from the web root.
• Enforce server-side upload validation: allowlist safe extensions, verify content type and magic bytes, and store uploads outside the web-accessible path.
• Run the NetCharts Server with least privilege and isolate it from sensitive internal networks.
• Place the service behind a reverse proxy or WAF that blocks executable file uploads and access to uploaded executables.

Detection

• Monitor web and application logs for upload requests containing executable extensions such as .jsp, .war, .exe, .dll, .php or .asp.
• Alert on HTTP requests that retrieve newly uploaded files, especially from upload directories, followed by process creation on the server.
• Watch for unexpected child processes spawned by the NetCharts Server service or its web container.
• Baseline and monitor file creation in web-accessible directories for new executable files.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.