« Volver al listado

CVE-2014-0694

Estado: ModificadaMedia (5)—

Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Cloud Portal

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0694",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-03-14T10:55:05.723",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=33336",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=33336",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818."
    },
    {
      "lang": "es",
      "value": "Intelligent Automation para Cloud (IAC) en Cisco Cloud Portal 9.4.1 y anteriores incluye una clave criptográfica en archivos binarios, lo que facilita a atacantes remotos obtener datos en texto claro de una instalación de IAC arbitraria mediante el aprovechamiento de esta clave, también conocido como Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814 y CSCui34818."
    }
  ],
  "lastModified": "2026-06-17T00:03:30.113",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26D4A390-4F2E-4978-B2EE-D69315C19D94",
              "versionEndIncluding": "9.4.1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B42A12C4-FBA7-4A24-BD71-652DB9329766"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "257939F1-2806-48FC-A553-FBB8F974D041"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D064F97D-C82A-4834-B331-320FC769EBBF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "687EF522-0EDA-4572-B41C-5BEC96B93948"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C79C4C7F-A148-41CB-A80F-285CAFD9599E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D66F9DC-FDBB-471B-8453-5452A7C5D124"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB10A254-3C6F-45B5-BBE8-9970366CEE9E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}