Remote Code Execution Vulnerability in Cisco Unified Contact Center Express
CVE-2018-0403

9.8CRITICAL

Key Information:

Vendor
Cisco
Status
Cisco Unified Contact Center Express Unknown
Vendor
CVE Published:
18 July 2018

Summary

The web-based management interface of Cisco Unified Contact Center Express has multiple vulnerabilities that may be exploited by an unauthenticated, remote attacker. These vulnerabilities could allow the attacker to retrieve sensitive information, such as cleartext passwords, potentially compromising system integrity and confidentiality. Cisco has released advisories to address this security flaw, urging users to apply the necessary patches and updates.

Affected Version(s)

Cisco Unified Contact Center Express unknown Cisco Unified Contact Center Express unknown

References

https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1041352
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.