Description
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.
Affected products
- Cisco / unified_communications_manager8.0(2c)su1 – 8.0(2c)su1
- Cisco / unified_communications_manager7.1(5b)su1a – 7.1(5b)su1a
- Cisco / unified_communications_manager8.0 – 8.0
- Cisco / unified_communications_manager8.0(1) – 8.0(1)
- Cisco / unified_communications_manager8.0(2) – 8.0(2)
- Cisco / unified_communications_manager8.0(2a) – 8.0(2a)
- Cisco / unified_communications_manager8.0(2b) – 8.0(2b)
- Cisco / unified_communications_manager8.0(2c) – 8.0(2c)
- Cisco / unified_communications_manager5.0 – 5.0
- Cisco / unified_communications_manager5.1 – 5.1
- Cisco / unified_communications_manager5.1(1) – 5.1(1)
- Cisco / unified_communications_manager5.1(1b) – 5.1(1b)
- Cisco / unified_communications_manager5.1(1c) – 5.1(1c)
- Cisco / unified_communications_manager5.1(2) – 5.1(2)
- Cisco / unified_communications_manager5.1(2a) – 5.1(2a)
- Cisco / unified_communications_manager5.1(2b) – 5.1(2b)
- Cisco / unified_communications_manager5.1(3) – 5.1(3)
- Cisco / unified_communications_manager5.1(3a) – 5.1(3a)
- Cisco / unified_communications_manager5.1(3c) – 5.1(3c)
- Cisco / unified_communications_manager5.1(3d) – 5.1(3d)
- Cisco / unified_communications_manager5.1(3e) – 5.1(3e)
- Cisco / unified_communications_manager5.1.2 – 5.1.2
- Cisco / unified_communications_manager6.0 – 6.0
- Cisco / unified_communications_manager6.1(1) – 6.1(1)
- Cisco / unified_communications_manager6.1(1a) – 6.1(1a)
- Cisco / unified_communications_manager6.1(1b) – 6.1(1b)
- Cisco / unified_communications_manager6.1(2) – 6.1(2)
- Cisco / unified_communications_manager6.1(2)su1 – 6.1(2)su1
- Cisco / unified_communications_manager6.1(2)su1a – 6.1(2)su1a
- Cisco / unified_communications_manager6.1(3) – 6.1(3)
- Cisco / unified_communications_manager6.1(3a) – 6.1(3a)
- Cisco / unified_communications_manager6.1(3b) – 6.1(3b)
- Cisco / unified_communications_manager6.1(3b)su1 – 6.1(3b)su1
- Cisco / unified_communications_manager6.1(4) – 6.1(4)
- Cisco / unified_communications_manager6.1(4)su1 – 6.1(4)su1
- Cisco / unified_communications_manager6.1(4a) – 6.1(4a)
- Cisco / unified_communications_manager6.1(4a)su2 – 6.1(4a)su2
- Cisco / unified_communications_manager6.1(5) – 6.1(5)
- Cisco / unified_communications_manager6.1(5)su1 – 6.1(5)su1
- Cisco / unified_communications_manager7.0(1)su1 – 7.0(1)su1
- Cisco / unified_communications_manager7.0(1)su1a – 7.0(1)su1a
- Cisco / unified_communications_manager7.0(2) – 7.0(2)
- Cisco / unified_communications_manager7.0(2a) – 7.0(2a)
- Cisco / unified_communications_manager7.0(2a)su1 – 7.0(2a)su1
- Cisco / unified_communications_manager7.0(2a)su2 – 7.0(2a)su2
- Cisco / unified_communications_manager7.1(2a) – 7.1(2a)
- Cisco / unified_communications_manager7.1(2a)su1 – 7.1(2a)su1
- Cisco / unified_communications_manager7.1(2b) – 7.1(2b)
- Cisco / unified_communications_manager7.1(2b)su1 – 7.1(2b)su1
- Cisco / unified_communications_manager7.1(3) – 7.1(3)
- Cisco / unified_communications_manager7.1(3a) – 7.1(3a)
- Cisco / unified_communications_manager7.1(3a)su1 – 7.1(3a)su1
- Cisco / unified_communications_manager7.1(3a)su1a – 7.1(3a)su1a
- Cisco / unified_communications_manager7.1(3b) – 7.1(3b)
- Cisco / unified_communications_manager7.1(3b)su1 – 7.1(3b)su1
- Cisco / unified_communications_manager7.1(3b)su2 – 7.1(3b)su2
- Cisco / unified_communications_manager7.1(5) – 7.1(5)
- Cisco / unified_communications_manager7.1(5)su1 – 7.1(5)su1
- Cisco / unified_communications_manager7.1(5)su1a – 7.1(5)su1a
- Cisco / unified_communications_manager7.1(5a) – 7.1(5a)
- Cisco / unified_communications_manager7.1(5b) – 7.1(5b)
- Cisco / unified_communications_manager7.1(5b)su1 – 7.1(5b)su1
- Cisco / unified_ip_interactive_voice_response
- Cisco / unified_ip_ivr7.0(1) – 7.0(1)
- Cisco / unified_ip_ivr7.0(2) – 7.0(2)
- Cisco / unified_ip_ivr6.0(1) – 6.0(1)
- Cisco / unified_ip_ivr8.0(2) – 8.0(2)
- Cisco / unified_ip_ivr8.5(1) – 8.5(1)
- Cisco / unified_ip_ivr8.0(1) – 8.0(1)
Exploits & proofs of concept
- exploit-dbCisco - 'file' Directory Traversalby Sandro Gauci
- nucleiCisco CUCM, UCCX, and Unified IP-IVR- Directory Traversalby daffainfo
Updated 20m ago · 8 sources