CVE-2014-3344

CVE Database · CVE-2014-3344

CVE-2014-3344

· N/AModified

CVSS v3.1

N/A

EPSS

1.95%

Published

Aug 27, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq31129, CSCuq31134, CSCuq31137, and CSCuq31563.

Weaknesses (CWE)

CWE-79

Affected Products (1)

cisco · transport_gateway_installation_softwarevulnerable

References (12)

http://secunia.com/advisories/60278

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3344

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=35431

Vendor Advisory

http://www.securityfocus.com/bid/69412

http://www.securitytracker.com/id/1030760

https://exchange.xforce.ibmcloud.com/vulnerabilities/95482

http://secunia.com/advisories/60278

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3344

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=35431

KEV Catalog EPSS Scores Vendors All CVEs