CVE-2014-3344: Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Sma...

Security readout for executives and security teams

CVE-2014-3344 is a set of cross-site scripting issues in Cisco Transport Gateway for Smart Call Home 4.0. An attacker could cause malicious script or HTML to run in a user’s browser through unspecified web parameters. The sources do not provide CVSS, affected-build detail beyond 4.0, or confirmed exploitation. Exposure is most likely where Cisco Transport Gateway for Smart Call Home 4.0 remains deployed and its web interface is reachable by users or networks that should not administer it. The bundle does not identify other affected versions or products. Treat this as a targeted legacy exposure issue. It is not KEV-listed and lacks public severity scoring in the bundle, but internet- or broadly reachable management software with XSS risk should be remediated or isolated promptly. Mitigation focus: Check Cisco’s advisory for fixed software, workarounds, or support status.; Upgrade or retire affected TG-SCH 4.0 systems according to Cisco guidance.; Restrict access to the TG-SCH web interface to trusted administration networks..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.