CVE-2014-3332

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-11 · updated 2026-06-17

Description

Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029.

Affected products

Cisco Unified Communications Manager: through 8.6\(2\)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332
http://tools.cisco.com/security/center/viewAlert.x?alertId=35198
http://www.securityfocus.com/bid/69068
http://www.securitytracker.com/id/1030687
https://exchange.xforce.ibmcloud.com/vulnerabilities/95136
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3332
http://tools.cisco.com/security/center/viewAlert.x?alertId=35198
http://www.securityfocus.com/bid/69068
http://www.securitytracker.com/id/1030687
https://exchange.xforce.ibmcloud.com/vulnerabilities/95136

Get alerted when CVE-2014-3332 or the next vulnerability affects your stack