VulnerabilityModified
CVE-2014-0747
The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to inject commands via unspecified CAPF programs, aka Bug ID CSCum95493.
MEDIUM 6.8EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to inject commands via unspecified CAPF programs, aka Bug ID CSCum95493.
- CVSS 2.0
- 6.8 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:C
- EPSS
- 0.25% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/unified communications manager
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0747Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33048Vendor Advisory
- http://www.securitytracker.com/id/1029843
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0747Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33048Vendor Advisory
- http://www.securitytracker.com/id/1029843
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.