CVE-2014-7991

Published: 14/11/2014 Updated: 08/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The Remote Mobile Access Subsystem in Cisco Unified Communications Manager (CM) 10.0(1) and previous versions does not properly validate the Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof VCS core devices via a crafted certificate issued by a legitimate Certification Authority, aka Bug ID CSCuq86376.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco unified communications manager 10.0
cisco unified communications manager

A vulnerability in the Remote Mobile Access Subsystem in Cisco Unified Communications Manager (Cisco Unified CM) could allow an unauthenticated, remote attacker to supply a crafted Transport Layer Security (TLS) certificate that may be accepted by the affected device The vulnerability is due to improper validation of the SAN field of a TLS certif ...

CWE-310 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7991 http://tools.cisco.com/security/center/viewAlert.x?alertId=36381 http://secunia.com/advisories/62267 http://www.securitytracker.com/id/1031181 http://www.securityfocus.com/bid/71013 https://exchange.xforce.ibmcloud.com/vulnerabilities/98574 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141111-CVE-2014-7991

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-7991

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect