What is the CVSS score of CVE-2014-0651?

CVE-2014-0651 has a CVSS 2.0 base score of 4.9 (Medium). CVSS vector: AV:N/AC:M/Au:S/C:P/I:P/A:N. EPSS exploitation probability: 0.4%.

Context Directory Agent CVE-2014-0651

MEDIUM

Permissions, Privileges, and Access Controls (CWE-264)

2014-01-08 psirt@cisco.com

Privilege Escalation Cisco Context Directory Agent

4.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.9 MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:P/I:P/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Jan 08, 2014 - 21:55 cve.org

MEDIUM 4.9

DescriptionCVE.org

The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-264. The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347. Affected products include: Cisco Context Directory Agent.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.