Viproy CUCDM IP Phone XML Services Speed Dial Attack Tool

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Viproy CUCDM IP Phone XML Services - Speed Dial Attack Tool', 'Description' = %q The BVSMWeb portal in the web framework...

Cisco Unified Communications Domain Manager Information Disclosure Vulnerability

Cisco Unified Communications Domain Manager UCDM is the United States Cisco Cisco company developed a dedicated call processing components in the unified communications solution. The component has scalable, distributable, and highly available enterprise voice-over-IP call processing capabilities....

CVE-2015-4229

The web framework in Cisco Unified Communications Domain Manager 8.14ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589...

PT-2015-6473

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager version 8.14ER1 Description The issue allows remote attackers to obtain sensitive information by visiting a specific URL. Recommendations For Cisco Unified Communications Domain Manager version...

CVE-2015-4229: Exposure of Sensitive Information to an Unauthorized Actor

The web framework in Cisco Unified Communications Domain Manager 8.14ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589...

CVE-2014-3300

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager CDM in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041...

Improper access control

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager CDM in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041...

CVE-2014-3300

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager CDM in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041...

CVE-2014-3300

CVE-2014-3300 affects Cisco Unified Communications Domain Manager (CDM) BVSMWeb portal in Unified CDM Application Software prior to 10, where insufficient access control allows remote attackers to modify BVSMWeb user information via a crafted URL. Related materials show Metasploit/Viproy modules ...

PT-2014-5195

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM versions prior to 10 Description The issue is related to improper access control implementation in the BVSMWeb portal of the Cisco Unified Communications Domain Manager. This allows remote...

CVE-2014-3300: Undefined Security Weakness

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager CDM in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041...

Multiple Vulnerabilities in Cisco Unified Communications Domain Manager

Cisco Unified Communications Domain Manager Cisco Unified CDM is affected by the following vulnerabilities: Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability Cisco Unified Communications Domain Manager Default SSH Key Vulnerability Cisco Unified Communications Domain...

CVE-2014-3281

The web framework in VOSS in Cisco Unified Communications Domain Manager CDM does not properly implement access control, which allows remote attackers to obtain potentially sensitive user information by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun46071 and CSCun46101...

PT-2014-5174

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM affected versions not specified Description The issue concerns improper access control implementation in the web framework of Cisco Unified Communications Domain Manager CDM, allowing remote...

PT-2014-5177

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM affected versions not specified Description The issue concerns the web framework in VOSS, which does not properly implement access control. This allows remote attackers to obtain potentially...