Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2014-0743
HistoryFeb 27, 2014 - 1:55 a.m.

CVE-2014-0743

2014-02-2701:55:03
CWE-287
cisco
web.nvd.nist.gov
27
capf
cisco
unified communications manager
authentication bypass
crafted data
cve-2014-0743
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

65.6%

JSON

The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468.

Affected configurations

Nvd
Node
ciscounified_communications_managerRange≤10.0\(1\)
OR
ciscounified_communications_managerMatch3.3\(5\)
OR
ciscounified_communications_managerMatch3.3\(5\)sr1
OR
ciscounified_communications_managerMatch3.3\(5\)sr2a
OR
ciscounified_communications_managerMatch4.1\(3\)
OR
ciscounified_communications_managerMatch4.1\(3\)sr1
OR
ciscounified_communications_managerMatch4.1\(3\)sr2
OR
ciscounified_communications_managerMatch4.1\(3\)sr3
OR
ciscounified_communications_managerMatch4.1\(3\)sr4
OR
ciscounified_communications_managerMatch4.2
OR
ciscounified_communications_managerMatch4.2.1
OR
ciscounified_communications_managerMatch4.2.2
OR
ciscounified_communications_managerMatch4.2.3
OR
ciscounified_communications_managerMatch4.2.3sr1
OR
ciscounified_communications_managerMatch4.2.3sr2
OR
ciscounified_communications_managerMatch4.2.3sr2b
OR
ciscounified_communications_managerMatch4.3
OR
ciscounified_communications_managerMatch10.0
VendorProductVersionCPE
ciscounified_communications_manager*cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
ciscounified_communications_manager3.3(5)cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:*
ciscounified_communications_manager3.3(5)sr1cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr1:*:*:*:*:*:*:*
ciscounified_communications_manager3.3(5)sr2acpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*
ciscounified_communications_manager4.1(3)cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\):*:*:*:*:*:*:*
ciscounified_communications_manager4.1(3)sr1cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr1:*:*:*:*:*:*:*
ciscounified_communications_manager4.1(3)sr2cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr2:*:*:*:*:*:*:*
ciscounified_communications_manager4.1(3)sr3cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr3:*:*:*:*:*:*:*
ciscounified_communications_manager4.1(3)sr4cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr4:*:*:*:*:*:*:*
ciscounified_communications_manager4.2cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 181

Related

cisco 1
cvelist 1
prion 1
nvd 1
cisco
cisco
Cisco Unified Communications Manager CAPF Unauthenticated Device Information Update Vulnerability
2014-02-25 23:04:55
cvelist
cvelist
CVE-2014-0743
2014-02-27 01:00:00
prion
prion
Authentication flaw
2014-02-27 01:55:00
nvd
nvd
CVE-2014-0743
2014-02-27 01:55:03

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

65.6%

JSON
Related for CVE-2014-0743
cisco1cvelist1prion1nvd1