CVE-2012-0366
published 2012-03-01CVE-2012-0366: Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator…
PriorityP344critical9CVSS 2.0
AVNACLAuSCCICAC
EPSS
2.28%
81.1th percentile
Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
Affected
49 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unity_connection | <= 7.1\(3b\)su1 | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
| cisco | unity_connection | — | — |
CVSS provenance
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_cisco9.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-87q4-9j27-9f9c: Cisco Unity Connection before 7
ghsa_unreviewed·2022-05-04
CVE-2012-0366 [HIGH] GHSA-87q4-9j27-9f9c: Cisco Unity Connection before 7
Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
Cisco
Multiple Vulnerabilities in Cisco Unity Connection
vendor_cisco·2012-03-01·CVSS 9.0
CVE-2012-0366 [CRITICAL] Multiple Vulnerabilities in Cisco Unity Connection
Multiple Vulnerabilities in Cisco Unity Connection
Cisco Unity Connection contains two vulnerabilities:
Cisco Unity Connection Privilege Escalation Vulnerability
Cisco Unity Connection Denial of Service Vulnerability
Exploitation of the Cisco Unity Connection Privilege Escalation Vulnerability may allow an authenticated, remote attacker to elevate privileges and obtain full access to the affected system.
Exploitation of the Cisco Unity Connection Denial of Service Vulnerability may allow an unauthenticated, remote attacker to cause system services to terminate unexpectedly, which may result in a denial of service condition.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that mitigate these vulnerabilities.
This advisory is available at
Cisco
Multiple Vulnerabilities in Cisco Unity Connection
vendor_cisco
CVE-2012-0366 Multiple Vulnerabilities in Cisco Unity Connection
CVE-2012-0366: Multiple Vulnerabilities in Cisco Unity Connection
Cisco Unity Connection contains two vulnerabilities: Cisco Unity Connection Privilege Escalation Vulnerability Cisco Unity Connection Denial of Service Vulnerability Exploitation of the Cisco Unity Connection Privilege Escalation Vulnerability may allow an authenticated, remote attacker to elevate privileges and obtain full access to the affected system. Exploitation of the Cisco Unity Connection Denial of Service Vulnerability may allow an unauthenticated, remote attacker to cause system services to terminate unexpectedly, which may result in a denial of service condition. Cisco has released software updates that address these vulnerabilities. There are no
Bug IDs: CSCtd45141, CSCtq67899, CSCtd45141, CSCtq67899, CSCtd45141
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2012-03-01
Published