CVE-2014-0694

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-14 · updated 2026-06-17
Weakness: CWE-255

Description

Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.

Affected products

Cisco Cloud Portal: through 9.4.1; 9.1-sp1, 9.1-sp2, 9.1-sp3, 9.3, 9.3.1, 9.3.2 (+1)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694
http://tools.cisco.com/security/center/viewAlert.x?alertId=33336
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694
http://tools.cisco.com/security/center/viewAlert.x?alertId=33336

Get alerted when CVE-2014-0694 or the next vulnerability affects your stack