VIR Vulnerability Intelligence Relay

CVE-2014-3274

medium
Published 2014-05-26 · Modified 2026-05-06
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
4.3

Description

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact
VendorProductVersionsFixed
cisco ciscotelepresence_system_software{"endIncluding":"6.0.5\\(5\\)"}
cisco ciscotelepresence_system_software1.2.3\(1101\)
cisco ciscotelepresence_system_software1.3.2\(1393\)
cisco ciscotelepresence_system_software1.4.7\(2229\)
cisco ciscotelepresence_system_software1.5.1\(2082\)
cisco ciscotelepresence_system_software1.5.3\(2115\)
cisco ciscotelepresence_system_software1.5.10\(3648\)
cisco ciscotelepresence_system_software1.5.11\(3659\)
cisco ciscotelepresence_system_software1.5.12\(3701\)
cisco ciscotelepresence_system_software1.5.13\(3717\)
cisco ciscotelepresence_system_software1.6.0\(3954\)
cisco ciscotelepresence_system_software1.6.2\(4023\)
cisco ciscotelepresence_system_software1.6.3\(4042\)
cisco ciscotelepresence_system_software1.6.4\(4072\)
cisco ciscotelepresence_system_software1.6.5\(4097\)
cisco ciscotelepresence_system_software1.6.6\(4109\)
cisco ciscotelepresence_system_software1.6.7\(4212\)
cisco ciscotelepresence_system_software1.6.8\(4222\)
cisco ciscotelepresence_system_software1.7.0.1\(4764\)
cisco ciscotelepresence_system_software1.7.0.2\(4719\)
cisco ciscotelepresence_system_software1.7.1\(4864\)
cisco ciscotelepresence_system_software1.7.2\(4937\)
cisco ciscotelepresence_system_software1.7.2.1\(2\)
cisco ciscotelepresence_system_software1.7.4\(270\)
cisco ciscotelepresence_system_software1.7.5\(42\)
cisco ciscotelepresence_system_software1.7.6\(4\)
cisco ciscotelepresence_system_software1.8.0\(55\)
cisco ciscotelepresence_system_software1.8.1\(34\)
cisco ciscotelepresence_system_software1.8.2\(11\)
cisco ciscotelepresence_system_software1.8.3\(4\)
cisco ciscotelepresence_system_software1.8.4\(13\)
cisco ciscotelepresence_system_software1.8.5\(4\)
cisco ciscotelepresence_system_software1.9.0\(46\)
cisco ciscotelepresence_system_software1.9.0.1\(3\)
cisco ciscotelepresence_system_software1.9.1\(68\)
cisco ciscotelepresence_system_software1.9.2
cisco ciscotelepresence_system_software1.9.2\(19\)
cisco ciscotelepresence_system_software1.9.3
cisco ciscotelepresence_system_software1.9.3\(44\)
cisco ciscotelepresence_system_software1.9.4
cisco ciscotelepresence_system_software1.9.4\(19\)
cisco ciscotelepresence_system_software1.9.5
cisco ciscotelepresence_system_software1.9.5\(7\)
cisco ciscotelepresence_system_software1.9.6
cisco ciscotelepresence_system_software1.9.6\(2\)
cisco ciscotelepresence_system_software1.9.6.1\(3\)
cisco ciscotelepresence_system_software1.10.0
cisco ciscotelepresence_system_software1.10.0\(259\)
cisco ciscotelepresence_system_software1.10.1
cisco ciscotelepresence_system_software1.10.1\(43\)
cisco ciscotelepresence_system_software1.10.2\(42\)
cisco ciscotelepresence_system_software1.10.3\(41\)
cisco ciscotelepresence_system_software4.0.0
cisco ciscotelepresence_system_software6.0.0.1\(4\)
cisco ciscotelepresence_system_software6.0.1\(50\)
cisco ciscotelepresence_system_software6.0.2\(28\)
cisco ciscotelepresence_system_software6.0.3\(33\)
cisco ciscotelepresence_system_software6.0.4\(11\)

References

CWEs

CWE-310

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.