Lucene search
CiscoCVE-2014-3318HistoryJul 10, 2014 - 11:06 a.m.
CVE-2014-3318
2014-07-1011:06:28
CWE-20
cisco
web.nvd.nist.gov
31
cisco
unified communications
dna
vulnerability
cve-2014-3318
security
nvd
bug id cscup76318
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
72.2%
Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318.
Affected configurations
Node
ciscounified_communications_manager
ORciscounified_communications_managerMatch10.0\(1\)_base
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_communications_manager | * | cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 10.0(1)_base | cpe:2.3:a:cisco:unified_communications_manager:10.0\(1\)_base:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-3318
2014-07-10 10:00:00
cisco
cisco
Cisco Unified Communications Manager DNA Path Traversal Vulnerability
2014-07-10 14:16:54
prion
prion
Directory traversal
2014-07-10 11:06:00
nvd
nvd
CVE-2014-3318
2014-07-10 11:06:28
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
72.2%
Related for CVE-2014-3318