Lucene search
HistoryJan 24, 2014 - 4:38 a.m.
CVE-2014-0674
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
High
EPSS
0.017
Percentile
87.9%
Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host name, aka Bug ID CSCud10992.
Affected configurations
Node
ciscovideo_surveillance_operations_managerMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | video_surveillance_operations_manager | - | cpe:2.3:a:cisco:video_surveillance_operations_manager:-:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2014-01-24 04:38:00
cve
cve
CVE-2014-0674
2014-01-24 04:38:09
cisco
cisco
cvelist
cvelist
CVE-2014-0674
2014-01-24 02:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
High
EPSS
0.017
Percentile
87.9%
Related for NVD:CVE-2014-0674