VulnerabilityModified
CVE-2014-0742
The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka…
MEDIUM 6.2EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464.
- CVSS 2.0
- 6.2 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:N
- EPSS
- 0.25% probability · 16th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/unified communications manager
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0742Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33045Vendor Advisory
- http://www.securitytracker.com/id/1029843
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0742Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33045Vendor Advisory
- http://www.securitytracker.com/id/1029843
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.