Lucene search
HistoryJul 10, 2014 - 11:06 a.m.
CVE-2014-3316
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
6.2
Confidence
Low
EPSS
0.002
Percentile
65.0%
The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted parameter, aka Bug ID CSCup76297.
Affected configurations
Node
ciscounified_communications_manager
ORciscounified_communications_managerMatch10.0\(1\)_base
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_communications_manager | * | cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 10.0(1)_base | cpe:2.3:a:cisco:unified_communications_manager:10.0\(1\)_base:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2014-3316
2014-07-10 11:06:28
prion
prion
Design/Logic Flaw
2014-07-10 11:06:00
cisco
cisco
Cisco Unified Communications Manager DNA Arbitrary File Upload Vulnerability
2014-07-10 16:29:48
cvelist
cvelist
CVE-2014-3316
2014-07-10 10:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
6.2
Confidence
Low
EPSS
0.002
Percentile
65.0%
Related for NVD:CVE-2014-3316