CVE-2013-3402 — Code Injection in Cisco Unified Communications Manager

CWE-94 — Code InjectionCWE-20 — Improper Input ValidationCWE-264CWE-310CWE-89 — SQL Injection5 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.6%
top 29.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Communications Manager
Timeline
PublishedJul 18
Latest updateMay 17

Description

An unspecified function in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary commands via unknown vectors, aka Bug ID CSCuh73440.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-8m88-59vr-3wh9: An unspecified function in Cisco Unified Communications Manager (CUCM) 7↗2022-05-17
▶
CVEList
CVE-2013-3402: An unspecified function in Cisco Unified Communications Manager (CUCM) 7↗2013-07-18
▶

📋Vendor Advisories

2
Cisco
Cisco Unified Communications Manager Command Injection Vulnerability↗2013-07-17
▶
Cisco
Multiple Vulnerabilities in Cisco Unified Communications Manager↗2013-07-17
▶
CVE-2013-3402 — Code Injection in Cisco | cvebase