CVE-2014-0742

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-0742
The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464.

6.2 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:S/C:C/I:C/A:N

Exploitability : 3.1 / Impact : 9.2

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact NONE

References
Link Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0742 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=33045 Vendor Advisory
http://www.securitytracker.com/id/1029843
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0742 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=33045 Vendor Advisory
http://www.securitytracker.com/id/1029843
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2b:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:10.0:*:*:*:*:*:*:*
History

21 Nov 2024, 02:02

Type Values Removed Values Added
References () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0742 - Vendor Advisory () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0742 - Vendor Advisory
References () http://tools.cisco.com/security/center/viewAlert.x?alertId=33045 - Vendor Advisory () http://tools.cisco.com/security/center/viewAlert.x?alertId=33045 - Vendor Advisory
References () http://www.securitytracker.com/id/1029843 - () http://www.securitytracker.com/id/1029843 -
Information

Published : 2014-02-27 01:55

Updated : 2025-04-12 10:46

NVD link : CVE-2014-0742

Mitre link : CVE-2014-0742

CVE.ORG link : CVE-2014-0742

JSON object : View

Products Affected

cisco

  • unified_communications_manager
CWE
CWE-20

Improper Input Validation