CVE

Id
70641  
CVE No.
CVE-2014-3345  
Status
Candidate  
Description
The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not properly check authorization for administrative web pages, which allows remote attackers to modify the product via a crafted URL, aka Bug ID CSCuq31503.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671566 70641 CVE-2014-3345 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=35468  View
671567 70641 CVE-2014-3345 CISCO:20140828 Transport Gateway for Smart Call Home Unauthorized Configuration Change Vulnerability  View
671568 70641 CVE-2014-3345 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3345  View
671569 70641 CVE-2014-3345 BID:69442  View
671570 70641 CVE-2014-3345 URL:http://www.securityfocus.com/bid/69442  View
671571 70641 CVE-2014-3345 SECTRACK:1030774  View
671572 70641 CVE-2014-3345 URL:http://www.securitytracker.com/id/1030774  View
671573 70641 CVE-2014-3345 SECUNIA:60391  View
671574 70641 CVE-2014-3345 URL:http://secunia.com/advisories/60391  View
671575 70641 CVE-2014-3345 XF:cisco-tgsch-cve20143345-sec-bypass(95589)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15160 JVNDB-2014-004035 Cisco Carrier Routing System で使用される Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 Cisco Carrier Routing System (CRS) で使用される Cisco IOS XR には、サービス運用妨害 (CPU 資源の消費および IPv6 パケットのドロップ) 状態にされる脆弱性が存在します。 CVE-2014-3353 70641 7.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004035.html  View