CVE-2014-0686

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-04 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908.

Affected products

Cisco Unified Communications Manager: through 9.1\(2.10000.28\); 9.1(1), 9.1(2)

References

http://osvdb.org/102750
http://secunia.com/advisories/56818
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0686
http://tools.cisco.com/security/center/viewAlert.x?alertId=32683
http://www.securityfocus.com/bid/65281
https://exchange.xforce.ibmcloud.com/vulnerabilities/90852
http://osvdb.org/102750
http://secunia.com/advisories/56818
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0686
http://tools.cisco.com/security/center/viewAlert.x?alertId=32683
http://www.securityfocus.com/bid/65281
https://exchange.xforce.ibmcloud.com/vulnerabilities/90852

Get alerted when CVE-2014-0686 or the next vulnerability affects your stack