Default User Account Vulnerabilities in Cisco Unity 2.x and 3.x

CVE-2002-1190

Summary

Cisco Unity versions 2.x and 3.x are susceptible to vulnerabilities due to the use of well-known default user accounts. This security flaw can be exploited by remote attackers, potentially granting them unauthorized access to the system. Once unauthorized access is obtained, attackers may place arbitrary phone calls, leading to significant risks such as toll fraud and disruption of services. Administrators are urged to review and secure default configurations to mitigate these risks effectively.

References