CVE-2014-0741

Cisco Unified Communications Manager < 10.0(1) - Arbitrary File Read and Write via CAPF CLI Certificate Import

Title source: llm

Description

The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=33046

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029843

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0741

Scores

EPSS 0.0025

EPSS Percentile 16.0%

Details

CWE

CWE-310

Status published

Products (18)

cisco/unified_communications_manager 3.3\(5\)

cisco/unified_communications_manager 3.3\(5\)sr1

cisco/unified_communications_manager 3.3\(5\)sr2a

cisco/unified_communications_manager 4.1\(3\)

cisco/unified_communications_manager 4.1\(3\)sr1

cisco/unified_communications_manager 4.1\(3\)sr2

cisco/unified_communications_manager 4.1\(3\)sr3

cisco/unified_communications_manager 4.1\(3\)sr4

cisco/unified_communications_manager 4.2

cisco/unified_communications_manager 4.2.1

... and 8 more

Published Feb 27, 2014

Tracked Since Feb 18, 2026