CVE-2014-2190: Cisco Broadband Access Center Telco Wireless Software

Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to hijack the authentication of arbitrary users for requests that make BAC-TW changes, aka Bug IDs CSCuo23804 and CSCuo26389.

Affected products

• Cisco Broadband Access Center Telco Wireless Software: affected versions not specified

Published 2014-05-07. Last modified 2026-06-17.