CVE-2014-3332

medium

Description

Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/95136

http://www.securitytracker.com/id/1030687

http://www.securityfocus.com/bid/69068

http://tools.cisco.com/security/center/viewAlert.x?alertId=35198

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332

Details

Source: Mitre, NVD

Published: 2014-08-11

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N