Lucene search
CiscoCVE-2013-1240HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1240
2022-10-0316:14:47
CWE-20
cisco
web.nvd.nist.gov
28
cisco
unified communications manager
cucm
input validation
local users
arbitrary files
bug id
cscue25770
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:C/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
5.1%
The command-line interface in Cisco Unified Communications Manager (CUCM) does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770.
Affected configurations
Node
ciscounified_communications_manager
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_communications_manager | cpe:/a:cisco:unified_communications_manager:::: |
Related
prion
prion
Design/Logic Flaw
2013-05-04 03:24:00
cisco
cisco
Cisco Unified Communications Manager Arbitrary File Read Vulnerability
2014-04-29 18:35:52
nvd
nvd
CVE-2013-1240
2013-05-04 03:24:41
cvelist
cvelist
CVE-2013-1240
2022-10-03 16:14:47
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:C/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2013-1240