CVE-2014-0733: Medium severity Cisco Unified Communications Manager vulnerability
The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0733?
The severity of CVE-2014-0733 is classified as high due to improper authentication enforcement in Cisco Unified Communications Manager.
How do I fix CVE-2014-0733?
To fix CVE-2014-0733, update your Cisco Unified Communications Manager software to a version higher than 10.0(1) or apply the latest security patches provided by Cisco.
What systems are affected by CVE-2014-0733?
CVE-2014-0733 affects various versions of Cisco Unified Communications Manager, including 3.3(5), 4.1(3), and up to 10.0(1).
Can CVE-2014-0733 be exploited remotely?
Yes, CVE-2014-0733 can be exploited remotely by attackers who can send direct requests to specific URLs to read ELM files.
Is there a workaround for CVE-2014-0733 until I can apply a patch?
While no official workaround is specified for CVE-2014-0733, it is recommended to restrict access to affected services and review security configurations.