Vulnerability Details : CVE-2014-3333
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
Products affected by CVE-2014-3333
- cpe:2.3:a:cisco:unity_connection:9.1\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:9.1\(2\):*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-3333
1.83%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 81 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-3333
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.0
|
HIGH | AV:N/AC:L/Au:S/C:C/I:C/A:C |
8.0
|
10.0
|
NIST |
CWE ids for CVE-2014-3333
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-3333
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/95135
Cisco Unity Connection privilege escalation CVE-2014-3333 Vulnerability Report
-
http://www.securityfocus.com/bid/69074
Cisco Unity Connection CVE-2014-3333 Remote Security Vulnerability
-
http://www.securitytracker.com/id/1030688
Cisco Unity Connection Lets Remote Authenticated Users Gain Elevated Privileges - SecurityTracker
-
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333
Cisco Unity Connection HTTP Intercept VulnerabilityVendor Advisory
-
http://secunia.com/advisories/59768
Sign in
-
http://tools.cisco.com/security/center/viewAlert.x?alertId=35200
Cisco Unity Connection HTTP Intercept VulnerabilityVendor Advisory
Jump to