Unrated severityNVD Advisory· Published Jul 7, 2014· Updated May 6, 2026

CVE-2014-2197

Description

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.

Affected products

Cisco Systems, Inc./Unified Cdm Application Software
cpe:2.3:a:cisco:unified_cdm_application_software:*:*:*:*:*:*:*:*
Range: <=8.1
Cisco Systems, Inc./Unified Communications Domain Manager
cpe:2.3:a:cisco:unified_communications_domain_manager:-:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdmnvdVendor Advisory
secunia.com/advisories/59573nvd
tools.cisco.com/security/center/viewAMBAlert.xnvd
www.securityfocus.com/bid/68333nvd
www.securitytracker.com/id/1030515nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000