Lucene search
HistoryMay 04, 2013 - 3:24 a.m.
CVE-2013-1240
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:C/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
5.1%
The command-line interface in Cisco Unified Communications Manager (CUCM) does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770.
Affected configurations
Node
ciscounified_communications_manager
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_communications_manager | * | cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2013-05-04 03:24:00
cisco
cisco
Cisco Unified Communications Manager Arbitrary File Read Vulnerability
2014-04-29 18:35:52
cvelist
cvelist
CVE-2013-1240
2013-05-04 01:00:00
cve
cve
CVE-2013-1240
2013-05-04 03:24:41
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:C/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2013-1240