CVE-2002-1190 Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unity server | = 2.0 | No fix listed |
| cisco unity server | = 2.1 | No fix listed |
| cisco unity server | = 2.2 | No fix listed |
| cisco unity server | = 2.3 | No fix listed |
| cisco unity server | = 2.4 | No fix listed |
| cisco unity server | = 2.46 | No fix listed |
| cisco unity server | = 3.0 | No fix listed |
| cisco unity server | = 3.1 | No fix listed |
References
- 20021004 Predefined Restriction Tables Allow Calls to International Operator patch vendor-advisory
- cisco-unity-insecure-configuration(10282) vdb-entry vendor-advisory
- cisco-unity-example-default-account(44545) vdb-entry