CVE-2014-3333

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-11 · updated 2026-06-17
Weakness: CWE-264

Description

The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.

Affected products

Cisco Unity Connection: 9.1(1), 9.1(2)

References

http://secunia.com/advisories/59768
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333
http://tools.cisco.com/security/center/viewAlert.x?alertId=35200
http://www.securityfocus.com/bid/69074
http://www.securitytracker.com/id/1030688
https://exchange.xforce.ibmcloud.com/vulnerabilities/95135
http://secunia.com/advisories/59768
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333
http://tools.cisco.com/security/center/viewAlert.x?alertId=35200
http://www.securityfocus.com/bid/69074
http://www.securitytracker.com/id/1030688
https://exchange.xforce.ibmcloud.com/vulnerabilities/95135

Get alerted when CVE-2014-3333 or the next vulnerability affects your stack