CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager (CUCM/Unified CM) contains a design/logic flaw that allows remote attackers to obtain sensitive information from a phone via an RRQ operation . This is demonstrated by the discovery of a cleartext UseUserCredential field within an SPDefault...