VulnerabilityModified
CVE-2014-3292
The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.
MEDIUM 5.5EPSS 1.54%
Does this matter?
Lower severity and a low EPSS score (1.54%). Track it; it rarely justifies an emergency change on its own.
Description
The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.
- CVSS 2.0
- 5.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:P
- EPSS
- 1.54% probability · 74th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/unified communications manager
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/58315Permissions Required
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3292Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34574Vendor Advisory
- http://www.securitytracker.com/id/1030408Third Party Advisory, VDB Entry
- http://secunia.com/advisories/58315Permissions Required
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3292Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34574Vendor Advisory
- http://www.securitytracker.com/id/1030408Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.