What is the CVSS score of CVE-2014-3307?

CVE-2014-3307 has a CVSS 2.0 base score of 6.8 (Medium). CVSS vector: AV:A/AC:H/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.2%.

Universal Small Cell Series Firmware CVE-2014-3307

MEDIUM

2014-07-02 psirt@cisco.com

Cisco Information Disclosure Universal Small Cell Series Firmware

6.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:A/AC:H/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:H/Au:N/C:C/I:C/A:C

Attack Vector

Adjacent

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jul 02, 2014 - 10:35 cve.org

MEDIUM 6.8

DescriptionCVE.org

The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages, aka Bug ID CSCup47513.

AnalysisAI

The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages, aka Bug ID CSCup47513. Rated medium severity (CVSS 6.8). No vendor patch available.

Technical ContextAI

The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages, aka Bug ID CSCup47513. Affected products include: Cisco Universal Small Cell Series Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.