Cisco CUCDM Remote Code Execution Vulnerability (CVE-2015-0682)
Release date:
Updated on:
Affected Systems:
Cisco uniied Communications Domain Manager 8.1 (4)
Cisco uniied Communications Domain Manager
Description:
CVE (CAN) ID: CVE-2015-0682
Cisco uniied Communications Manager is an enterprise-level IP call handling system.
Due to invalid security restrictions, Authentication Remote attackers can exploit this vulnerability to execute arbitrary code.
<* Source: vendor
Link: http://tools.cisco.com/security/center/viewAlert.x? AlertId = 38113
*>
Suggestion:
Vendor patch:
Cisco
-----
Cisco has released a Security Bulletin (alertId = 38113) for this purpose and the corresponding patch:
AlertId = 38113: Cisco uniied Communications Domain Manager Application Software Remote Code Execution Vulnerability
Link: http://tools.cisco.com/security/center/viewAlert.x? AlertId = 38113
This article permanently updates the link address: