CVE-2014-3332: Cisco Unified Communications Manager (CM) 8.6(.2) and earlier has an incorrect CLI restrictions setting, wh...

Security readout for executives and security teams

This Cisco Unified Communications Manager issue can let a remote authenticated user create concurrent CLI logins that are not detected as intended. The business concern is weaker accountability for administrative access on legacy voice infrastructure, not evidence of unauthenticated takeover. Exposure is most likely in organizations still operating Cisco Unified Communications Manager 8.6(2) or earlier with remote CLI access available to authenticated users. Prioritize inventory and vendor-guided remediation for any remaining Cisco UCM 8.6(2) or earlier systems. Urgency rises if remote CLI access is broadly reachable or administrator accounts are shared. Mitigation focus: Identify any Cisco Unified Communications Manager 8.6(2) or earlier systems.; Review Cisco Security Notice CVE-2014-3332 for official remediation guidance.; Restrict CLI access to trusted administrators and management networks..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.