VULNERABILITY INTELLIGENCE

CVE-2014-2181

CVSS score6.8 MEDIUM
EPSS probability1.60%
CISA KEVNot currently listed
Published2014-05-07
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:N/A:N

Description

Cisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551.

Weakness classification

  • CWE-287: Improper Authentication

Primary references