PT-2014-5225 · Cisco · Cisco Unified Communications Manager

Published 2014-08-11 · Updated 2017-08-29 · CVE-2014-3332

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager (CM) versions 8.6.2 and earlier

Description The issue is related to an incorrect CLI restrictions setting, allowing remote authenticated users to establish undetected concurrent logins.

Recommendations For versions 8.6.2 and earlier, update to a version that addresses the incorrect CLI restrictions setting to prevent undetected concurrent logins.

Fix

Related Identifiers

CVE-2014-3332

Affected Products

Cisco Unified Communications Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-3332 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35198 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95136 · Note
• http://securityfocus.com/bid/69068 · Note
• http://securitytracker.com/id/1030687 · Note