CVE-2014-2190: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Broadcast Access Center for T...

Security readout for executives and security teams

CVE-2014-2190 is a CSRF flaw in Cisco Broadcast Access Center for Telco and Wireless. If an authenticated user is tricked into making a request, an attacker could cause BAC-TW configuration changes under that user’s authority. The source bundle does not provide CVSS, fixed versions, or confirmed exploitation. Exposure is likely limited to organizations that deployed Cisco Broadcast Access Center for Telco and Wireless and have users accessing its web interface. Risk is higher where the management interface is reachable from broad networks or administrators browse untrusted content while authenticated. Treat as a targeted legacy-platform risk, not an emergency based on current evidence. Prioritize confirmation and vendor-guided remediation if BAC-TW remains in production, especially if administrative access is broadly reachable. Mitigation focus: Review Cisco’s advisory for fixed releases, workarounds, and version-specific guidance.; Restrict BAC-TW web management access to trusted administrative networks or VPN.; Minimize privileged BAC-TW sessions and avoid browsing untrusted sites while authenticated..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.