CVE-2014-0657: The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not...

Security readout for executives and security teams

Cisco Unified Communications Manager administration portal could let a logged-in user bypass role restrictions. This is not described as unauthenticated or remotely exploitable by the public, but it could let an insider or compromised account reach functions they should not access. Organizations running Cisco Unified Communications Manager 9.1(1) or earlier, especially where the administration portal is reachable by broad internal users or VPN users with valid credentials. Treat as a targeted access-control risk for legacy Cisco voice infrastructure. Prioritize if affected systems remain in production or the admin portal is broadly reachable. Mitigation focus: Check Cisco’s security notice for fixed releases or vendor-approved mitigation.; Inventory Cisco Unified Communications Manager versions and flag 9.1(1) or earlier.; Restrict administration portal access to trusted management networks where feasible..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.