CVE-2014-0686: Cisco Unified Communications Manager

Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908.

Affected products

• Cisco Unified Communications Manager: up to and including 9.1\(2.10000.28\); version 9.1(1) only; version 9.1(2) only

Published 2014-02-04. Last modified 2026-06-17.