Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-6689

Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.

Published

2013-11-18T03:55:06.133

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.9 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.4

Impact Score

10.0

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	cisco	unified_communications_manager	≤ 9.1\(1\)	Yes
Application	cisco	unified_communications_manager	3.3\(5\)	Yes
Application	cisco	unified_communications_manager	3.3\(5\)sr1	Yes
Application	cisco	unified_communications_manager	3.3\(5\)sr2a	Yes
Application	cisco	unified_communications_manager	4.1\(3\)	Yes
Application	cisco	unified_communications_manager	4.1\(3\)sr1	Yes
Application	cisco	unified_communications_manager	4.1\(3\)sr2	Yes
Application	cisco	unified_communications_manager	4.1\(3\)sr3	Yes
Application	cisco	unified_communications_manager	4.1\(3\)sr4	Yes
Application	cisco	unified_communications_manager	4.2	Yes
Application	cisco	unified_communications_manager	4.2.1	Yes
Application	cisco	unified_communications_manager	4.2.2	Yes
Application	cisco	unified_communications_manager	4.2.3	Yes
Application	cisco	unified_communications_manager	4.2.3sr1	Yes
Application	cisco	unified_communications_manager	4.2.3sr2	Yes
Application	cisco	unified_communications_manager	4.2.3sr2b	Yes
Application	cisco	unified_communications_manager	4.3	Yes
Application	cisco	unified_communications_manager	4.3\(1\)	Yes
Application	cisco	unified_communications_manager	5.0	Yes
Application	cisco	unified_communications_manager	5.1	Yes
Application	cisco	unified_communications_manager	5.1\(1\)	Yes
Application	cisco	unified_communications_manager	5.1\(1b\)	Yes
Application	cisco	unified_communications_manager	5.1\(1c\)	Yes
Application	cisco	unified_communications_manager	5.1\(2\)	Yes
Application	cisco	unified_communications_manager	5.1\(2a\)	Yes
Application	cisco	unified_communications_manager	5.1\(2b\)	Yes
Application	cisco	unified_communications_manager	5.1\(3\)	Yes
Application	cisco	unified_communications_manager	5.1\(3a\)	Yes
Application	cisco	unified_communications_manager	5.1\(3c\)	Yes
Application	cisco	unified_communications_manager	5.1\(3d\)	Yes
Application	cisco	unified_communications_manager	5.1\(3e\)	Yes
Application	cisco	unified_communications_manager	5.1.2	Yes
Application	cisco	unified_communications_manager	6.0	Yes
Application	cisco	unified_communications_manager	6.0\(1\)	Yes
Application	cisco	unified_communications_manager	6.0\(1a\)	Yes
Application	cisco	unified_communications_manager	6.0\(1b\)	Yes
Application	cisco	unified_communications_manager	6.1\(1\)	Yes
Application	cisco	unified_communications_manager	6.1\(1a\)	Yes
Application	cisco	unified_communications_manager	6.1\(1b\)	Yes
Application	cisco	unified_communications_manager	6.1\(2\)	Yes
Application	cisco	unified_communications_manager	6.1\(2\)su1	Yes
Application	cisco	unified_communications_manager	6.1\(2\)su1a	Yes
Application	cisco	unified_communications_manager	6.1\(3\)	Yes
Application	cisco	unified_communications_manager	6.1\(3a\)	Yes
Application	cisco	unified_communications_manager	6.1\(3b\)	Yes
Application	cisco	unified_communications_manager	6.1\(3b\)su1	Yes
Application	cisco	unified_communications_manager	6.1\(4\)	Yes
Application	cisco	unified_communications_manager	6.1\(4\)su1	Yes
Application	cisco	unified_communications_manager	6.1\(4a\)	Yes
Application	cisco	unified_communications_manager	6.1\(4a\)su2	Yes
Application	cisco	unified_communications_manager	6.1\(5\)	Yes
Application	cisco	unified_communications_manager	6.1\(5\)su1	Yes
Application	cisco	unified_communications_manager	6.1\(5\)su2	Yes
Application	cisco	unified_communications_manager	6.1\(5\)su3	Yes
Application	cisco	unified_communications_manager	7.0\(1\)su1	Yes
Application	cisco	unified_communications_manager	7.0\(1\)su1a	Yes
Application	cisco	unified_communications_manager	7.0\(2\)	Yes
Application	cisco	unified_communications_manager	7.0\(2a\)	Yes
Application	cisco	unified_communications_manager	7.0\(2a\)su1	Yes
Application	cisco	unified_communications_manager	7.0\(2a\)su2	Yes
Application	cisco	unified_communications_manager	7.1\(2a\)	Yes
Application	cisco	unified_communications_manager	7.1\(2a\)su1	Yes
Application	cisco	unified_communications_manager	7.1\(2b\)	Yes
Application	cisco	unified_communications_manager	7.1\(2b\)su1	Yes
Application	cisco	unified_communications_manager	7.1\(3\)	Yes
Application	cisco	unified_communications_manager	7.1\(3a\)	Yes
Application	cisco	unified_communications_manager	7.1\(3a\)su1	Yes
Application	cisco	unified_communications_manager	7.1\(3a\)su1a	Yes
Application	cisco	unified_communications_manager	7.1\(3b\)	Yes
Application	cisco	unified_communications_manager	7.1\(3b\)su1	Yes
Application	cisco	unified_communications_manager	7.1\(3b\)su2	Yes
Application	cisco	unified_communications_manager	7.1\(5\)	Yes
Application	cisco	unified_communications_manager	7.1\(5\)su1	Yes
Application	cisco	unified_communications_manager	7.1\(5\)su1a	Yes
Application	cisco	unified_communications_manager	7.1\(5a\)	Yes
Application	cisco	unified_communications_manager	7.1\(5b\)	Yes
Application	cisco	unified_communications_manager	7.1\(5b\)su1	Yes
Application	cisco	unified_communications_manager	7.1\(5b\)su1a	Yes
Application	cisco	unified_communications_manager	7.1\(5b\)su2	Yes
Application	cisco	unified_communications_manager	7.1\(5b\)su3	Yes
Application	cisco	unified_communications_manager	7.1\(5b\)su4	Yes
Application	cisco	unified_communications_manager	7.1\(5b\)su5	Yes
Application	cisco	unified_communications_manager	7.1\(5b\)su6	Yes
Application	cisco	unified_communications_manager	8.0	Yes
Application	cisco	unified_communications_manager	8.0\(1\)	Yes
Application	cisco	unified_communications_manager	8.0\(2\)	Yes
Application	cisco	unified_communications_manager	8.0\(2a\)	Yes
Application	cisco	unified_communications_manager	8.0\(2b\)	Yes
Application	cisco	unified_communications_manager	8.0\(2c\)	Yes
Application	cisco	unified_communications_manager	8.0\(2c\)su1	Yes
Application	cisco	unified_communications_manager	8.0\(3\)	Yes
Application	cisco	unified_communications_manager	8.0\(3a\)	Yes
Application	cisco	unified_communications_manager	8.0\(3a\)su1	Yes
Application	cisco	unified_communications_manager	8.0\(3a\)su2	Yes
Application	cisco	unified_communications_manager	8.0\(3a\)su3	Yes
Application	cisco	unified_communications_manager	8.5	Yes
Application	cisco	unified_communications_manager	8.5\(1\)	Yes
Application	cisco	unified_communications_manager	8.5\(1\)su1	Yes
Application	cisco	unified_communications_manager	8.5\(1\)su2	Yes
Application	cisco	unified_communications_manager	8.5\(1\)su3	Yes
Application	cisco	unified_communications_manager	8.5\(1\)su4	Yes
Application	cisco	unified_communications_manager	8.5\(1\)su5	Yes
Application	cisco	unified_communications_manager	8.6	Yes
Application	cisco	unified_communications_manager	8.6\(1\)	Yes
Application	cisco	unified_communications_manager	8.6\(1a\)	Yes
Application	cisco	unified_communications_manager	8.6\(2\)	Yes
Application	cisco	unified_communications_manager	8.6\(2a\)	Yes
Application	cisco	unified_communications_manager	8.6\(2a\)su1	Yes
Application	cisco	unified_communications_manager	8.6\(2a\)su2	Yes
Application	cisco	unified_communications_manager	8.6\(2a\)su3	Yes
Application	cisco	unified_communications_manager	8.6\(3\)	Yes
Application	cisco	unified_communications_manager	8.6\(4\)	Yes
Application	cisco	unified_communications_manager	9.0\(1\)	Yes

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6689 Vendor Advisory ([email protected])
http://tools.cisco.com/security/center/viewAlert.x?alertId=31758 Vendor Advisory ([email protected])
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6689 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://tools.cisco.com/security/center/viewAlert.x?alertId=31758 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)