CVE-2014-0747

Опубликовано: 27 фев. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to inject commands via unspecified CAPF programs, aka Bug ID CSCum95493.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0747
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=33048
Vendor Advisory
http://www.securitytracker.com/id/1029843
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0747
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=33048
Vendor Advisory
http://www.securitytracker.com/id/1029843

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия до 10.0\(1\) (включая)

cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr4:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2b:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00049

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-pr76-46qc-55q8

github

больше 3 лет назад