CVE-2010-1571 Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows rem...
HighCVSS 7.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified contact center express | = 5.0 | No fix listed |
| cisco unified contact center express | = 6.0 | No fix listed |
| cisco unified contact center express | = 7.0 | No fix listed |
| cisco customer response solution | = 5.0 | No fix listed |
| cisco customer response solution | = 6.0 | No fix listed |
| cisco customer response solution | = 7.0 | No fix listed |
| cisco unified ip interactive voice response | = 5.0 | No fix listed |
| cisco unified ip interactive voice response | = 6.0 | No fix listed |
| cisco unified ip interactive voice response | = 7.0 | No fix listed |
References
- 20100609 Vulnerabilities in Cisco Unified Contact Center Express patch vendor-advisory
- 40680 vdb-entry
- 1024082 vdb-entry
- cisco-unified-bootstrap-dir-traversal(59277) vdb-entry