Command Injection Vulnerability in Cisco Unified CallManager CLI
CVE-2006-3592
Currently unrated
Key Information:
- Vendor
Cisco
- Status
- Vendor
- CVE Published:
- 18 July 2006
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2006-3592?
An unspecified command injection vulnerability exists in the command line interface (CLI) of Cisco Unified CallManager versions 5.0(1) to 5.0(3a). This flaw allows local users to execute arbitrary commands with elevated privileges through certain CLI commands, potentially compromising the system's integrity and security. Addressing this vulnerability is crucial to maintaining the safety of telecommunication networks reliant on Cisco technologies.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.