CVE-2014-3395
published 2014-09-30CVE-2014-3395: Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343.
PriorityP432medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.67%
74.0th percentile
Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | webex_meetings_server | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wvvr-qwjx-m9v3: Cisco WebEx Meetings Server (WMS) 2
ghsa_unreviewed·2022-05-17
CVE-2014-3395 [MEDIUM] CWE-20 GHSA-wvvr-qwjx-m9v3: Cisco WebEx Meetings Server (WMS) 2
Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343.
Cisco
Cisco WebEx Meetings Server Arbitrary Download Vulnerability
vendor_cisco·2014-09-30·CVSS 5.0
CVE-2014-3395 [MEDIUM] CWE-200 Cisco WebEx Meetings Server Arbitrary Download Vulnerability
Cisco WebEx Meetings Server Arbitrary Download Vulnerability
A vulnerability in Cisco WebEx Meetings Server (Cisco WMS) could allow an unauthenticated, remote attacker to download arbitrary files to an affected device.
The vulnerability is due to insufficient user-input validation. An attacker could exploit this vulnerability by submitting crafted URL requests to a vulnerable device.
Cisco has confirmed the vulnerability in a security notice and released software updates.
Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-09-30
Published