VulnerabilityModified
CVE-2014-0741
The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via a crafted command, aka…
MEDIUM 6.2EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461.
- CVSS 2.0
- 6.2 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:N
- EPSS
- 0.25% probability · 16th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- cisco/unified communications manager
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0741Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33046Vendor Advisory
- http://www.securitytracker.com/id/1029843
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0741Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33046Vendor Advisory
- http://www.securitytracker.com/id/1029843
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.