CVE-2014-0674

EUVD-2014-0705
Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host name, aka Bug ID CSCud10992.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
ciscovideo_surveillance_operations_manager
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/102409
http://secunia.com/advisories/56619
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0674
http://www.securityfocus.com/bid/65111
http://www.securitytracker.com/id/1029692
http://www.ubuntu.com/usn/USN-2739-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/90651
http://osvdb.org/102409
http://secunia.com/advisories/56619
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0674
http://www.securityfocus.com/bid/65111
http://www.securitytracker.com/id/1029692
http://www.ubuntu.com/usn/USN-2739-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/90651