[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-0674Date: (C)2014-01-24   (M)2023-12-22


Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host name, aka Bug ID CSCud10992.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
OSVDB-102409
SECTRACK-1029692
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0674
SECUNIA-56619
BID-65111
USN-2739-1
cisco-vsom-cve20140674-unauth-access(90651)

CPE    1
cpe:/a:cisco:video_surveillance_operations_manager:-
CWE    1
CWE-287

© SecPod Technologies