CVE-2014-7991

🗓️ 14 Nov 2014 00:00:00Reported by ciscoType

The Remote Mobile Access Subsystem in Cisco Unified Communications Manager (CM) 10.0(1) and earlier does not properly validate the Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof VCS core devices via a crafted certificate issued by a legitimate Certification Authority

Reporter	Title	Published	Views	Family All 6
Cisco	Cisco Unified Communications Manager Remote Mobile Access Subsystem Vulnerability	11 Nov 201415:49	–	cisco
Tenable Nessus	Cisco Unified Communications Manager TLS SAN Field MitM (CSCuq86376)	29 Dec 201400:00	–	nessus
Cvelist	CVE-2014-7991	14 Nov 201400:00	–	cvelist
EUVD	EUVD-2014-7840	7 Oct 202500:30	–	euvd
NVD	CVE-2014-7991	14 Nov 201400:59	–	nvd
Prion	Design/Logic Flaw	14 Nov 201400:59	–	prion

NVD

Node

cisco unified_communications_managerRange≤10.0(1)

cisco unified_communications_managerMatch10.0

Source	Link
tools	www.tools.cisco.com/security/center/viewAlert.x
securityfocus	www.securityfocus.com/bid/71013
securitytracker	www.securitytracker.com/id/1031181
tools	www.tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7991
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/98574
secunia	www.secunia.com/advisories/62267

06 May 2026 22:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

EPSS0.00292

CWE-310