CVE-2014-2126

2014-04-1004:34:00

CWE-264

[email protected]

web.nvd.nist.gov

cisco

asa

software

privilege escalation

cve-2014-2126

cscuj33496

nvd

7.9 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

53.8%

JSON

Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and 9.1 before 9.1(3.4) allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496.

CPENameOperatorVersion
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.4
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq9.0
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.7
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq9.1

CPE	Name	Operator	Version
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.4
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	9.0
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.7
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	9.1