Vulnerability Details : CVE-2014-3332
Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029.
Products affected by CVE-2014-3332
- cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-3332
0.21%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 58 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-3332
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:P/A:N |
8.0
|
2.9
|
NIST |
References for CVE-2014-3332
-
http://www.securityfocus.com/bid/69068
Cisco Unified Communications Manager Concurrent Login Security Bypass Vulnerability
-
http://www.securitytracker.com/id/1030687
Cisco Unified Communications Manager CLI Restriction Flaw Lets Remote Authenticated Users Remain Undetected As a Logged in User - SecurityTracker
-
http://tools.cisco.com/security/center/viewAlert.x?alertId=35198
Cisco Unified Communications Manager Concurrent Login VulnerabilityVendor Advisory
-
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332
Cisco Unified Communications Manager Concurrent Login VulnerabilityVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/95136
Cisco Unified Communications Manager CLI security bypass CVE-2014-3332 Vulnerability Report
Jump to