Unscored severity · published Jul 7, 2014
CVE-2014-3300
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access…
–
CVSS
21.9%
EPSS
No
On KEV
Description
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.
Exploitation
Is it being used?
Exploit prediction (EPSS)21.9% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Cdm Application Software · Cisco
through 8.1.4; 8.1 · source: NVD
UC
Unified Communications Domain Manager · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3300
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3300
secunia.com
http://secunia.com/advisories/59556
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
Vendor Advisory
http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
Third Party Advisory
http://www.securityfocus.com/bid/68331
Third Party Advisory
http://www.securitytracker.com/id/1030515
More from Unified Cdm Application Software
–
CVE-2014-2197
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement…