CVE-2004-1322 Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configurati...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unity server | = 2.0 | No fix listed |
| cisco unity server | = 2.1 | No fix listed |
| cisco unity server | = 2.2 | No fix listed |
| cisco unity server | = 2.3 | No fix listed |
| cisco unity server | = 2.4 | No fix listed |
| cisco unity server | = 2.46 | No fix listed |
| cisco unity server | = 3.0 | No fix listed |
| cisco unity server | = 3.1 | No fix listed |
| cisco unity server | = 3.2 | No fix listed |
| cisco unity server | = 3.3 | No fix listed |
| cisco unity server | = 4.0 | No fix listed |
References
- P-060 government-resource patch third-party-advisory vendor-advisory
- 20041215 Cisco Unity Integrated with Exchange Has Default Passwords patch vendor-advisory
- 11954 patch vdb-entry vendor-advisory
- cisco-unity-exchange-default-accounts(18489) vdb-entry