CVE-2014-0669

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/102318
http://secunia.com/advisories/56546
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0669Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32513Vendor Advisory
http://www.securityfocus.com/bid/65052Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029666Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90614
http://osvdb.org/102318
http://secunia.com/advisories/56546
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0669Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32513Vendor Advisory
http://www.securityfocus.com/bid/65052Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029666Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90614

Timeline

Published: Jan 22, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-06704.3Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary we CVE-2014-06715.8Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attack CVE-2014-06724.0The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated us CVE-2014-06734.3Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote at CVE-2014-06746.8Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attac CVE-2014-06756.4The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different cus CVE-2014-06766.8Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367.CVE-2014-06775.0The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP sessi CVE-2014-06785.5The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users CVE-2014-06799.0Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated us CVE-2014-06804.3Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine (ISE CVE-2014-06814.3Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier allows remote attackers to inject a