VulnerabilityModified

CVE-2014-0669

The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371.

MEDIUM 5.0EPSS 1.83%

Does this matter?

Lower severity and a low EPSS score (1.83%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS: 1.83% probability · 79th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-264
Affected: cisco/asr 5000 series software
Source: psirt@cisco.com

EPSS trend

EPSS 1.8% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

http://osvdb.org/102318
http://secunia.com/advisories/56546
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0669Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32513Vendor Advisory
http://www.securityfocus.com/bid/65052Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029666Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90614
http://osvdb.org/102318
http://secunia.com/advisories/56546
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0669Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32513Vendor Advisory
http://www.securityfocus.com/bid/65052Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029666Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90614

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.