59556Third-party advisory
http://secunia.com/advisories/59556 CVE-2014-3300
Viproy CUCDM IP Phone XML Services - Call Forwarding Tool
Record summary
CVE-2014-3300 has a selected CVSS score of 7.5; EIP currently links 2 catalogued exploits.
Description
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
MetasploitViproy CUCDM IP Phone XML Services - Call Forwarding ToolMetasploit auxiliary PoCby fozavciNot analyzed1 file
MetasploitViproy CUCDM IP Phone XML Services - Speed Dial Attack ToolMetasploit auxiliary PoCby fozavciNot analyzed1 file
References
620140702 Multiple Vulnerabilities in Cisco Unified Communications Domain ManagerVendor advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm 20140702 Identifying and Mitigating Exploitation of the Multiple Vulnerabilities in Cisco Unified Communications Domain ManagerVendor advisory
http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689 68331vdb entry
http://www.securityfocus.com/bid/68331 1030515vdb entry
http://www.securitytracker.com/id/1030515 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-3300