CVE-2013-6689 — Improper Input Validation in Cisco Unified Communications Manager

CWE-20 — Improper Input Validation4 documents4 sources
Severity
6.9MEDIUMNVD
EPSS
0.1%
top 82.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Communications Manager
Timeline
PublishedNov 18
Latest updateMay 17

Description

Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-q8qh-g793-c4pf: Cisco Unified Communications Manager (Unified CM) 9↗2022-05-17
▶
CVEList
CVE-2013-6689: Cisco Unified Communications Manager (Unified CM) 9↗2013-11-16
▶

📋Vendor Advisories

1
Cisco
Cisco Unified Communications Manager Arbitrary File Read/Write Vulnerability↗2013-11-13
▶
CVE-2013-6689 — Improper Input Validation in Cisco | cvebase