Lucene search
HistoryJan 14, 2015 - 7:59 p.m.
CVE-2014-3314
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
55.7%
Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.
Affected configurations
Node
ciscoanyconnect_secure_mobility_clientandroid
Node
ciscoanyconnect_secure_mobility_clientmacos
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | anyconnect_secure_mobility_client | * | cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:android:*:* |
| cisco | anyconnect_secure_mobility_client | * | cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:macos:*:* |
Related
nessus
nessus
cisco
cisco
cve
cve
CVE-2014-3314
2015-01-14 19:59:00
prion
prion
Design/Logic Flaw
2015-01-14 19:59:00
cvelist
cvelist
CVE-2014-3314
2015-01-14 19:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
55.7%
Related for NVD:CVE-2014-3314