CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability

🗓️ 08 Apr 2021 04:05:35Reported by ciscoType

Cisco Unified Communications Products Remote Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the SOAP API interfaces of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection—an integrated messaging system—allows a perpetrator to execute arbitrary code. The Cisco Prime License Manager (PLM) licensing management tool also exposes vulnerabilities that enable a perpetrator to perform arbitrary actions.	8 Apr 202100:00	–	bdu_fstec
Cisco	Cisco Unified Communications Products Remote Code Execution Vulnerability	7 Apr 202116:00	–	cisco
Tenable Nessus	Cisco Unified Communications Manager RCE (cisco-sa-cucm-rce-pqVYwyb)	23 Apr 202100:00	–	nessus
Tenable Nessus	Cisco Unified Communications Manager IM&P RCE (cisco-sa-cucm-rce-pqVYwyb)	23 Apr 202100:00	–	nessus
Tenable Nessus	Cisco Unity Connection RCE (cisco-sa-cucm-rce-pqVYwyb)	23 Apr 202100:00	–	nessus
CNNVD	Cisco Unified Communications Manager和Cisco Unity Connection 代码注入漏洞	7 Apr 202100:00	–	cnnvd
CNVD	Cisco Unified Communications Manager and Cisco Unity Connection Code Injection Vulnerabilities	8 Apr 202100:00	–	cnvd
CVE	CVE-2021-1362	8 Apr 202104:05	–	cve
EUVD	EUVD-2021-6829	3 Oct 202520:07	–	euvd
NVD	CVE-2021-1362	8 Apr 202104:15	–	nvd

[
  {
    "product": "Cisco Unity Connection",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-pqVYwyb