Vulnerability Details : CVE-2014-0686
Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908.
Products affected by CVE-2014-0686
- cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_communications_manager:9.1\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_communications_manager:9.1\(2\):*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-0686
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-0686
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.0
|
MEDIUM | AV:L/AC:H/Au:S/C:C/I:C/A:C |
1.5
|
10.0
|
NIST |
CWE ids for CVE-2014-0686
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-0686
-
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0686
Cisco Unified Communications Manager Operating System-Level Privilege Escalation VulnerabilityVendor Advisory
-
http://osvdb.org/102750
-
http://tools.cisco.com/security/center/viewAlert.x?alertId=32683
Cisco Unified Communications Manager Operating System-Level Privilege Escalation VulnerabilityVendor Advisory
-
http://secunia.com/advisories/56818
Sign in
-
http://www.securityfocus.com/bid/65281
Cisco Unified Communications Manager CVE-2014-0686 Local Privilege Escalation Vulnerability
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/90852
Cisco Unified Communications Manager permissions privilege escalation CVE-2014-0686 Vulnerability Report
Jump to