Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-3274

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.

Published

2014-05-26T00:25:31.407

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-310
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco telepresence_system_software ≤ 6.0.5\(5\) Yes
Application cisco telepresence_system_software 1.2.3\(1101\) Yes
Application cisco telepresence_system_software 1.3.2\(1393\) Yes
Application cisco telepresence_system_software 1.4.7\(2229\) Yes
Application cisco telepresence_system_software 1.5.1\(2082\) Yes
Application cisco telepresence_system_software 1.5.3\(2115\) Yes
Application cisco telepresence_system_software 1.5.10\(3648\) Yes
Application cisco telepresence_system_software 1.5.11\(3659\) Yes
Application cisco telepresence_system_software 1.5.12\(3701\) Yes
Application cisco telepresence_system_software 1.5.13\(3717\) Yes
Application cisco telepresence_system_software 1.6.0\(3954\) Yes
Application cisco telepresence_system_software 1.6.2\(4023\) Yes
Application cisco telepresence_system_software 1.6.3\(4042\) Yes
Application cisco telepresence_system_software 1.6.4\(4072\) Yes
Application cisco telepresence_system_software 1.6.5\(4097\) Yes
Application cisco telepresence_system_software 1.6.6\(4109\) Yes
Application cisco telepresence_system_software 1.6.7\(4212\) Yes
Application cisco telepresence_system_software 1.6.8\(4222\) Yes
Application cisco telepresence_system_software 1.7.0.1\(4764\) Yes
Application cisco telepresence_system_software 1.7.0.2\(4719\) Yes
Application cisco telepresence_system_software 1.7.1\(4864\) Yes
Application cisco telepresence_system_software 1.7.2\(4937\) Yes
Application cisco telepresence_system_software 1.7.2.1\(2\) Yes
Application cisco telepresence_system_software 1.7.4\(270\) Yes
Application cisco telepresence_system_software 1.7.5\(42\) Yes
Application cisco telepresence_system_software 1.7.6\(4\) Yes
Application cisco telepresence_system_software 1.8.0\(55\) Yes
Application cisco telepresence_system_software 1.8.1\(34\) Yes
Application cisco telepresence_system_software 1.8.2\(11\) Yes
Application cisco telepresence_system_software 1.8.3\(4\) Yes
Application cisco telepresence_system_software 1.8.4\(13\) Yes
Application cisco telepresence_system_software 1.8.5\(4\) Yes
Application cisco telepresence_system_software 1.9.0\(46\) Yes
Application cisco telepresence_system_software 1.9.0.1\(3\) Yes
Application cisco telepresence_system_software 1.9.1\(68\) Yes
Application cisco telepresence_system_software 1.9.2 Yes
Application cisco telepresence_system_software 1.9.2\(19\) Yes
Application cisco telepresence_system_software 1.9.3 Yes
Application cisco telepresence_system_software 1.9.3\(44\) Yes
Application cisco telepresence_system_software 1.9.4 Yes
Application cisco telepresence_system_software 1.9.4\(19\) Yes
Application cisco telepresence_system_software 1.9.5 Yes
Application cisco telepresence_system_software 1.9.5\(7\) Yes
Application cisco telepresence_system_software 1.9.6 Yes
Application cisco telepresence_system_software 1.9.6\(2\) Yes
Application cisco telepresence_system_software 1.9.6.1\(3\) Yes
Application cisco telepresence_system_software 1.10.0 Yes
Application cisco telepresence_system_software 1.10.0\(259\) Yes
Application cisco telepresence_system_software 1.10.1 Yes
Application cisco telepresence_system_software 1.10.1\(43\) Yes
Application cisco telepresence_system_software 1.10.2\(42\) Yes
Application cisco telepresence_system_software 1.10.3\(41\) Yes
Application cisco telepresence_system_software 4.0.0 Yes
Application cisco telepresence_system_software 6.0.0.1\(4\) Yes
Application cisco telepresence_system_software 6.0.1\(50\) Yes
Application cisco telepresence_system_software 6.0.2\(28\) Yes
Application cisco telepresence_system_software 6.0.3\(33\) Yes
Application cisco telepresence_system_software 6.0.4\(11\) Yes
References