Vulnerability Description
Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | <= 8.6\(2\) |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35198Vendor Advisory
- http://www.securityfocus.com/bid/69068
- http://www.securitytracker.com/id/1030687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95136
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35198Vendor Advisory
- http://www.securityfocus.com/bid/69068
- http://www.securitytracker.com/id/1030687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95136
FAQ
What is CVE-2014-3332?
CVE-2014-3332 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecifi...
How severe is CVE-2014-3332?
CVE-2014-3332 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-3332?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager.