CVE-2016-1319: samsung x14j_firmware
Vulnerability summary
CVE-2016-1319 is a medium (CVSS 5.3) vulnerability in samsung x14j_firmware. EPSS estimates a 0.83% chance of exploitation in the next 30 days, higher than 56.7% of scored vulnerabilities.
Timeline
- 09-02-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.83%
Chance of exploitation in the next 30 days
Percentile
57%
Versus all other CVEs
30-day change
0.00 pp
From 0.83% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Samsung1 product
- x14j_firmwaret-ms14jakucb-1102.5
Sun1 product
- opensolarissnv_124
Zyxel1 product
- gs1900-10hp_firmware< 2.50\(aazi.0\)c0
Zzinc1 product
4 vendors · 4 products
References
4 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-ucmVendor AdvisoryX Refsource CISCO