CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
Percentile
61.2%
A vulnerability in a deprecated page in Cisco Unified Communications Domain Manager Application Software could allow an authenticated, remote attacker to execute arbitrary code.
The vulnerability is due to insufficient security restrictions imposed by the affected software that could allow arbitrary code execution. An authenticated, remote attacker could exploit this vulnerability to execute arbitrary code in the security context of the application. A successful exploit could be leveraged to conduct further attacks.
Cisco has confirmed the vulnerability and software updates available.
To exploit this vulnerability, an attacker must authenticate to the targeted device. This access requirement decreases the likelihood of a successful exploit.
Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | unified_communications_domain_manager | any | cpe:2.3:a:cisco:unified_communications_domain_manager:any:*:*:*:*:*:*:* |