CVE-2014-3345: The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installat...

Security readout for executives and security teams

CVE-2014-3345 affects Cisco Transport Gateway for Smart Call Home 4.0. The web framework did not properly enforce authorization on administrative web pages, allowing a remote attacker to change product configuration through a crafted URL. Public sources provided do not include CVSS, confirmed exploitation, or a specific fix. Exposure is limited to organizations running Cisco Transport Gateway for Smart Call Home 4.0, especially where its administrative web interface is reachable by untrusted networks. The provided affected-product metadata is incomplete, but the CVE description names the product and version. Treat this as a targeted legacy infrastructure risk. Prioritize remediation if the product exists in your environment or its admin interface is broadly reachable. Urgency is lower without confirmed exploitation, but unauthorized configuration change on management software is still business-relevant. Mitigation focus: Check Cisco advisory CSCuq31503 for fixed releases or official workarounds.; Restrict administrative web access to trusted management networks only.; Remove internet exposure for the TG-SCH administrative interface..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.