CVE-2014-0674: Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database conne...

Security readout for executives and security teams

CVE-2014-0674 is an authentication failure in Cisco Video Surveillance Operations Manager. The MySQL database connection may not require authentication, allowing a remote attacker with network connectivity to view sensitive data, change data, or disrupt service. The source bundle does not provide affected versions or a confirmed fix. Exposure is most likely in environments running Cisco VSOM where database connectivity is reachable from client networks. The bundle does not identify affected versions, default configurations, or internet exposure prevalence, so asset owners should verify directly against Cisco guidance. Treat this as a high-priority legacy exposure if Cisco VSOM is still in use. The potential impact includes surveillance data exposure, data tampering, and service disruption. Urgency depends on whether the database is reachable beyond tightly controlled management networks. Mitigation focus: Check the Cisco security notice for affected versions and vendor remediation guidance.; Restrict MySQL and VSOM database access to trusted management hosts only.; Review firewall rules separating client networks from database services..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.