VulnerabilityModified
CVE-2014-0671
Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749.
MEDIUM 5.8EPSS 2.27%
Does this matter?
Lower severity and a low EPSS score (2.27%). Track it; it rarely justifies an emergency change on its own.
Description
Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 2.27% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/mediasense
- Source
- psirt@cisco.com
References
- http://osvdb.org/102341
- http://secunia.com/advisories/56544
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0671Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32517Vendor Advisory
- http://www.securityfocus.com/bid/65055Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029669Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90617
- http://osvdb.org/102341
- http://secunia.com/advisories/56544
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0671Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32517Vendor Advisory
- http://www.securityfocus.com/bid/65055Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029669Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90617
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.