VulnerabilityModified
CVE-2014-3332
Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029.
MEDIUM 4.0EPSS 1.64%
Does this matter?
Lower severity and a low EPSS score (1.64%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
- EPSS
- 1.64% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- cisco/unified communications manager
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35198Vendor Advisory
- http://www.securityfocus.com/bid/69068
- http://www.securitytracker.com/id/1030687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95136
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35198Vendor Advisory
- http://www.securityfocus.com/bid/69068
- http://www.securitytracker.com/id/1030687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95136
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.