Vulnerability in Cisco Unified Communications Manager

CVE-2014-3332

Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029.

EPSS: 0.016 (73.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_communications_manager
N/a — versions n/a

References

psirt@cisco.com (vdb-entry, x_refsource_XF)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)