Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.
Conclusion & alert: CVE-2014-3274 is rated Low Risk (39.7/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 1.13%). Mandatory action: Monitor for updates and reassess as exploit intelligence or EPSS changes.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.38% | 1.13% | +0.75% |
| 2 | 2025-06-11 | 0.29% | 0.38% | +0.10% |
| 3 | 2025-03-23 | — | 0.29% | — |
Full EPSS history (6 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 4.3 | 2.0 | MEDIUM |
|
8.6 | 2.9 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| cisco | telepresence_system_software | <= 6.0.5\(5\) | cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.2.3\(1101\) | cpe:2.3:a:cisco:telepresence_system_software:1.2.3\(1101\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.3.2\(1393\) | cpe:2.3:a:cisco:telepresence_system_software:1.3.2\(1393\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.4.7\(2229\) | cpe:2.3:a:cisco:telepresence_system_software:1.4.7\(2229\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.5.1\(2082\) | cpe:2.3:a:cisco:telepresence_system_software:1.5.1\(2082\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.5.3\(2115\) | cpe:2.3:a:cisco:telepresence_system_software:1.5.3\(2115\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.5.10\(3648\) | cpe:2.3:a:cisco:telepresence_system_software:1.5.10\(3648\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.5.11\(3659\) | cpe:2.3:a:cisco:telepresence_system_software:1.5.11\(3659\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.5.12\(3701\) | cpe:2.3:a:cisco:telepresence_system_software:1.5.12\(3701\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.5.13\(3717\) | cpe:2.3:a:cisco:telepresence_system_software:1.5.13\(3717\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.6.0\(3954\) | cpe:2.3:a:cisco:telepresence_system_software:1.6.0\(3954\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.6.2\(4023\) | cpe:2.3:a:cisco:telepresence_system_software:1.6.2\(4023\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.6.3\(4042\) | cpe:2.3:a:cisco:telepresence_system_software:1.6.3\(4042\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.6.4\(4072\) | cpe:2.3:a:cisco:telepresence_system_software:1.6.4\(4072\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.6.5\(4097\) | cpe:2.3:a:cisco:telepresence_system_software:1.6.5\(4097\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.6.6\(4109\) | cpe:2.3:a:cisco:telepresence_system_software:1.6.6\(4109\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.6.7\(4212\) | cpe:2.3:a:cisco:telepresence_system_software:1.6.7\(4212\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.6.8\(4222\) | cpe:2.3:a:cisco:telepresence_system_software:1.6.8\(4222\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.7.0.1\(4764\) | cpe:2.3:a:cisco:telepresence_system_software:1.7.0.1\(4764\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.7.0.2\(4719\) | cpe:2.3:a:cisco:telepresence_system_software:1.7.0.2\(4719\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.7.1\(4864\) | cpe:2.3:a:cisco:telepresence_system_software:1.7.1\(4864\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.7.2\(4937\) | cpe:2.3:a:cisco:telepresence_system_software:1.7.2\(4937\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.7.2.1\(2\) | cpe:2.3:a:cisco:telepresence_system_software:1.7.2.1\(2\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.7.4\(270\) | cpe:2.3:a:cisco:telepresence_system_software:1.7.4\(270\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.7.5\(42\) | cpe:2.3:a:cisco:telepresence_system_software:1.7.5\(42\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.7.6\(4\) | cpe:2.3:a:cisco:telepresence_system_software:1.7.6\(4\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.8.0\(55\) | cpe:2.3:a:cisco:telepresence_system_software:1.8.0\(55\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.8.1\(34\) | cpe:2.3:a:cisco:telepresence_system_software:1.8.1\(34\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.8.2\(11\) | cpe:2.3:a:cisco:telepresence_system_software:1.8.2\(11\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.8.3\(4\) | cpe:2.3:a:cisco:telepresence_system_software:1.8.3\(4\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.8.4\(13\) | cpe:2.3:a:cisco:telepresence_system_software:1.8.4\(13\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.8.5\(4\) | cpe:2.3:a:cisco:telepresence_system_software:1.8.5\(4\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.0\(46\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.0\(46\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.0.1\(3\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.0.1\(3\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.1\(68\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.1\(68\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.2 | cpe:2.3:a:cisco:telepresence_system_software:1.9.2:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.2\(19\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.2\(19\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.3 | cpe:2.3:a:cisco:telepresence_system_software:1.9.3:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.3\(44\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.3\(44\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.4 | cpe:2.3:a:cisco:telepresence_system_software:1.9.4:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.4\(19\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.4\(19\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.5 | cpe:2.3:a:cisco:telepresence_system_software:1.9.5:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.5\(7\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.5\(7\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.6 | cpe:2.3:a:cisco:telepresence_system_software:1.9.6:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.6\(2\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.6\(2\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.9.6.1\(3\) | cpe:2.3:a:cisco:telepresence_system_software:1.9.6.1\(3\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.10.0 | cpe:2.3:a:cisco:telepresence_system_software:1.10.0:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.10.0\(259\) | cpe:2.3:a:cisco:telepresence_system_software:1.10.0\(259\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.10.1 | cpe:2.3:a:cisco:telepresence_system_software:1.10.1:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.10.1\(43\) | cpe:2.3:a:cisco:telepresence_system_software:1.10.1\(43\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.10.2\(42\) | cpe:2.3:a:cisco:telepresence_system_software:1.10.2\(42\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 1.10.3\(41\) | cpe:2.3:a:cisco:telepresence_system_software:1.10.3\(41\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 4.0.0 | cpe:2.3:a:cisco:telepresence_system_software:4.0.0:*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 6.0.0.1\(4\) | cpe:2.3:a:cisco:telepresence_system_software:6.0.0.1\(4\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 6.0.1\(50\) | cpe:2.3:a:cisco:telepresence_system_software:6.0.1\(50\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 6.0.2\(28\) | cpe:2.3:a:cisco:telepresence_system_software:6.0.2\(28\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 6.0.3\(33\) | cpe:2.3:a:cisco:telepresence_system_software:6.0.3\(33\):*:*:*:*:*:*:* |
| cisco | telepresence_system_software | 6.0.4\(11\) | cpe:2.3:a:cisco:telepresence_system_software:6.0.4\(11\):*:*:*:*:*:*:* |
| URL | Tags |
|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3274 | Vendor Advisory |
| http://tools.cisco.com/security/center/viewAlert.x?alertId=34327 | Vendor Advisory |
| http://www.securitytracker.com/id/1030272 | Third Party Advisory VDB Entry |