CVE-2014-0686

Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local...

6.0 Medium

Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908.

Exploit likelihood

0.31%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 6.0

Record: CVE-2014-0686
CVSS 2.0: 6.0 MediumAV:L/AC:H/Au:S/C:C/I:C/A:C
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-0686
Updated: 2026-11-02

EUVDEUVD-2014-0717 No score

Record: EUVD-2014-0717
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7v4h-325x-vg9c No score

Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local...

Record: GHSA-7v4h-325x-vg9c
Updated: 2026-11-02

Affected products

cisco unified communications manager

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0686 is a medium vulnerability (CVSS 6.0) in Cisco Unified Communications Manager, published February 4, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

History

In short

References