CVE-2014-3292

Published: Jun 10, 2014Modified: May 6, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.

Affected (1)

Products: Cisco: Unified Communications Manager

Cisco

1 product

Unified Communications Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Communications Manager	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://secunia.com/advisories/58315

Source: psirt@cisco.com

Permissions Required

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3292

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=34574

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1030408

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://secunia.com/advisories/58315

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3292

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=34574

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1030408

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.