CVE-2014-3314

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-01-14 · updated 2026-06-17
Weakness: CWE-20

Description

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.

Affected products

Cisco AnyConnect Secure Mobility Client: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3314
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3314

Get alerted when CVE-2014-3314 or the next vulnerability affects your stack