CVE-2014-3274: Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions canno...

Security readout for executives and security teams

Cisco TelePresence System could silently drop from HTTPS to HTTP if some secure sessions fail. A network-positioned attacker between CTS and Cisco UCM could force that failure and read sensitive directory information. The source bundle does not provide CVSS, patch details, or evidence of exploitation. Exposure is most likely in organizations still running legacy Cisco TelePresence System versions at or before CTS 6.0(.5)(5), especially where CTS-to-UCM paths cross networks where interception or traffic blocking is plausible. Handle as a legacy product exposure review, not an emergency based on the provided evidence. Prioritize remediation if affected CTS remains deployed on networks where interception is realistic. Mitigation focus: Review Cisco’s security notice for fixed releases or official configuration guidance.; Inventory CTS deployments and identify versions at or before 6.0(.5)(5).; Treat CTS-to-UCM network paths as sensitive until vendor remediation is confirmed..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.