VULNERABILITY INTELLIGENCE

CVE-2014-3314

CVSS score5 MEDIUM
EPSS probability1.09%
CISA KEVNot currently listed
Published2015-01-14
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references