iCULeak.py

iCULeak.py أداة للعثور على بيانات الاعتماد واستخراجها من ملفات تكوين الهاتف في البيئات المُدارة بواسطة CUCM من Cisco Call Manager. عند استخدام CUCM من Cisco Call Manager، يتم تخزين ملفات تكوين الهاتف على خادم TFTP. غالبًا ما تحتوي ملفات تكوين هواتف VoIP هذه على بيانات حساسة، بما في ذلك بيانات...

cisco-security-research

Cisco Security Research Исследователь: 0xReadingSteiner Контакт: [email protected] Вендор: Cisco Systems, Inc. Вендор уведомлён: 2026-08-04 Cisco PSIRT, ZDI, SSD Ответ вендора: отсутствует Почему это существует Независимые исследования безопасности коммерчески доступных продуктов Cisco выяви...

Silent-Call

Silent;Call Удалённый root-доступ без аутентификации к Cisco Unified Communications Manager 15.x Три HTTP-запроса. Ноль учётных данных. Root-доступ. Каждый звонок теперь ваш. Цепочка атаки Шаг| Компонент| Описание ---|---|--- 1| Spoofhack| Подделка заголовка X-Forwarded-For обходит ограничение...

EUVD-2011-3972

Malware in sbrugna...

EUVD-2011-2066

Malware in sbrugna...

EUVD-2009-2047

Malware in sbrugna...

EUVD-2012-0397

Malware in sbrugna...

EUVD-2022-26067

Malicious code in bioql PyPI...

CVE-2011-4019

Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager CUCM 7.x, allows remote attackers to cause a denial of service memory consumption via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93837 and CSCtj61883...

CISCO-SA-20180207-CUCM

creationtimestamp| type| source ---|---|--- 2024-12-17 09:00:36+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113667342705227470...

CISCO-SA-20191002-CUCM

creationtimestamp| type| source ---|---|--- 2024-12-17 06:40:58+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666792876511565...

Cisco Unified Communications Manager IM & Presence File Read Vulnerability (isco-sa-cucm-imp-afr-YBFLNyzd)

The version of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P installed on the remote host is prior to 14SU2. It is, therefore, affected by a file read vulnerability. Due to insufficient file permissions, an authenticated remote attacker could read arbitrary files on t...

Design/Logic Flaw

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

CVE-2022-20817 Cisco IP Phone Duplicate Key Vulnerability

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

CVE-2022-20817

Cisco CVE-2022-20817 affects Cisco Unified IP Phones when CUCM is in secure mode. Root cause: improper manufacturing key generation leads to duplicate manufactured keys on multiple devices, enabling a remote attacker to perform a man-in-the-middle attack and impersonate another user’s phone. Impa...

Cisco IP Phone Duplicate Key Vulnerability

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

Cisco Unified Communications Manager (CUCM) Detection Consolidation

Consolidation of Cisco Unified Communications Manager CUCM, formerly Call Manager detections. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

iCULeak - Tool To Find And Extract Credentials From Phone Configuration Files Hosted On Cisco CUCM

Tool to find and extract credentials from phone configuration files in environments managed by Cisco's CUCM Call Manager. When using Cisco's CUCM Call Manager, phone configuration files are stored on a TFTP server. These phone configuration files quite frequently contain sensitive data, including...

Cisco Unified Communication Manager HTTP Interface Information Disclosure Vulnerability (CSCvf20218)

According to its self-reported version, the Cisco Unified Communications Manager CUCM running on the remote device is affected by an information disclosure vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2016-9206

CVE-2016-9206 affects Cisco Unified Communications Manager (CUCM) through a vulnerability in the ccmadmin page that can allow an unauthenticated, remote attacker to perform reflected cross-site scripting (XSS). The issue arises from improper sanitization/encoding of user-supplied data on the ccma...