CVE-2014-2347

LOW 3.5CVE-2014-2347 · Published 06/05/2014 · updated 17/06/2026

In short

CVE-2014-2347 is a LOW (CVSS 3.5) vulnerability affecting misecuremessages (amtelco).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
misecuremessages amtelco	`= 6.2`	No fix yet

Description

Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.

References

service.amtelco.com/INFINITY/MSM/MSM6.2SecurityBriefing.pdf
cisa.gov/news-events/ics-advisories/icsa-14-121-01
ics-cert.us-cert.gov/advisories/ICSA-14-121-01 · US Government Resource

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free