Unscored severity · published Jul 7, 2014
CVE-2014-2197
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement…
–
CVSS
2.9%
EPSS
No
On KEV
Description
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Cdm Application Software · Cisco
through 8.1 · source: NVD
UC
Unified Communications Domain Manager · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2197
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2197
secunia.com
http://secunia.com/advisories/59573
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
tools.cisco.com
http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
www.securityfocus.com
http://www.securityfocus.com/bid/68333
www.securitytracker.com
http://www.securitytracker.com/id/1030515
More from Unified Cdm Application Software
–
CVE-2014-3300
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access…