What is CVE-2014-2126?

CVE-2014-2126 is a vulnerability in Cisco Adaptive Security Appliance Software, classified under CWE-264. Published 2014-04-10.

Is CVE-2014-2126 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Cisco Adaptive Security Appliance Software

CVE-2014-2126

Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and 9.1 before 9.1(3.4) allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496.

EPSS: 0.021 (79.5th percentile) — read the EPSS interpretation.

Affected products

Cisco Adaptive_security_appliance_software — versions 8.2, 8.4, 8.7
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

pwdworkstation/nmap-scan

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2014-2126?: CVE-2014-2126 is a vulnerability in Cisco Adaptive Security Appliance Software, classified under CWE-264. Published 2014-04-10.
Is CVE-2014-2126 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.