CVE-2014-3274
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.
Cisco TelePresence System (CTS) 6.0(.5)(5) y anteriores recurre a HTTP cuando ciertas sesiones HTTPS no pueden ser establecidas, lo que permite a atacantes man-in-the-middle obtener información sensible de directorio mediante el aprovechamiento de una posición de red entre CTS y Cisco Unified Communications Manager (UCM) para bloquear trafico HTTPS, también conocido como Bug ID CSCuj26326.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-05-07 CVE Reserved
- 2014-05-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-310: Cryptographic Issues
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1030272 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3274 | 2016-09-07 | |
| http://tools.cisco.com/security/center/viewAlert.x?alertId=34327 | 2016-09-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | <= 6.0.5\(5\) Search vendor "Cisco" for product "Telepresence System Software" and version " <= 6.0.5\(5\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.2.3\(1101\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.2.3\(1101\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.3.2\(1393\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.3.2\(1393\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.4.7\(2229\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.4.7\(2229\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.5.1\(2082\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.5.1\(2082\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.5.3\(2115\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.5.3\(2115\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.5.10\(3648\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.5.10\(3648\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.5.11\(3659\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.5.11\(3659\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.5.12\(3701\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.5.12\(3701\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.5.13\(3717\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.5.13\(3717\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.6.0\(3954\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.6.0\(3954\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.6.2\(4023\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.6.2\(4023\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.6.3\(4042\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.6.3\(4042\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.6.4\(4072\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.6.4\(4072\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.6.5\(4097\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.6.5\(4097\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.6.6\(4109\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.6.6\(4109\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.6.7\(4212\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.6.7\(4212\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.6.8\(4222\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.6.8\(4222\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.7.0.1\(4764\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.7.0.1\(4764\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.7.0.2\(4719\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.7.0.2\(4719\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.7.1\(4864\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.7.1\(4864\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.7.2\(4937\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.7.2\(4937\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.7.2.1\(2\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.7.2.1\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.7.4\(270\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.7.4\(270\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.7.5\(42\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.7.5\(42\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.7.6\(4\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.7.6\(4\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.8.0\(55\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.8.0\(55\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.8.1\(34\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.8.1\(34\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.8.2\(11\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.8.2\(11\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.8.3\(4\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.8.3\(4\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.8.4\(13\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.8.4\(13\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.8.5\(4\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.8.5\(4\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.0\(46\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.0\(46\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.0.1\(3\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.0.1\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.1\(68\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.1\(68\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.2 Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.2\(19\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.2\(19\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.3 Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.3\(44\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.3\(44\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.4 Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.4\(19\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.4\(19\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.5 Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.5\(7\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.5\(7\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.6 Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.6" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.6\(2\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.6\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.9.6.1\(3\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.9.6.1\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.10.0 Search vendor "Cisco" for product "Telepresence System Software" and version "1.10.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.10.0\(259\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.10.0\(259\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.10.1 Search vendor "Cisco" for product "Telepresence System Software" and version "1.10.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.10.1\(43\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.10.1\(43\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.10.2\(42\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.10.2\(42\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 1.10.3\(41\) Search vendor "Cisco" for product "Telepresence System Software" and version "1.10.3\(41\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 4.0.0 Search vendor "Cisco" for product "Telepresence System Software" and version "4.0.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 6.0.0.1\(4\) Search vendor "Cisco" for product "Telepresence System Software" and version "6.0.0.1\(4\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 6.0.1\(50\) Search vendor "Cisco" for product "Telepresence System Software" and version "6.0.1\(50\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 6.0.2\(28\) Search vendor "Cisco" for product "Telepresence System Software" and version "6.0.2\(28\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 6.0.3\(33\) Search vendor "Cisco" for product "Telepresence System Software" and version "6.0.3\(33\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence System Software Search vendor "Cisco" for product "Telepresence System Software" | 6.0.4\(11\) Search vendor "Cisco" for product "Telepresence System Software" and version "6.0.4\(11\)" | - |
Affected
| ||||||