Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-1406

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion of sensitive information in downloadable files. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a specific set of commands. A successful exploit could allow the attacker to obtain hashed credentials of system users. To exploit this vulnerability an attacker would need to have valid user credentials with elevated privileges.

Published

2021-04-08T04:15:12.593

Last Modified

2024-11-21T05:44:16.997

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-538
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco unified_communications_manager 10.5\(2\) Yes
Application cisco unified_communications_manager 10.5\(2\) Yes
Application cisco unified_communications_manager 10.5\(2\)su1 Yes
Application cisco unified_communications_manager 10.5\(2\)su1 Yes
Application cisco unified_communications_manager 10.5\(2\)su2 Yes
Application cisco unified_communications_manager 10.5\(2\)su2 Yes
Application cisco unified_communications_manager 10.5\(2\)su2a Yes
Application cisco unified_communications_manager 10.5\(2\)su2a Yes
Application cisco unified_communications_manager 10.5\(2\)su3 Yes
Application cisco unified_communications_manager 10.5\(2\)su3 Yes
Application cisco unified_communications_manager 10.5\(2\)su3a Yes
Application cisco unified_communications_manager 10.5\(2\)su3a Yes
Application cisco unified_communications_manager 10.5\(2\)su4 Yes
Application cisco unified_communications_manager 10.5\(2\)su4 Yes
Application cisco unified_communications_manager 10.5\(2\)su4a Yes
Application cisco unified_communications_manager 10.5\(2\)su4a Yes
Application cisco unified_communications_manager 10.5\(2\)su5 Yes
Application cisco unified_communications_manager 10.5\(2\)su6 Yes
Application cisco unified_communications_manager 10.5\(2\)su6 Yes
Application cisco unified_communications_manager 10.5\(2\)su6a Yes
Application cisco unified_communications_manager 10.5\(2\)su6a Yes
Application cisco unified_communications_manager 10.5\(2\)su7 Yes
Application cisco unified_communications_manager 10.5\(2\)su7 Yes
Application cisco unified_communications_manager 10.5\(2\)su8 Yes
Application cisco unified_communications_manager 10.5\(2\)su8 Yes
Application cisco unified_communications_manager 10.5\(2\)su9 Yes
Application cisco unified_communications_manager 10.5\(2\)su9 Yes
Application cisco unified_communications_manager 10.5\(2\)su10 Yes
Application cisco unified_communications_manager 10.5\(2\)su10 Yes
Application cisco unified_communications_manager 11.5\(1\) Yes
Application cisco unified_communications_manager 11.5\(1\) Yes
Application cisco unified_communications_manager 11.5\(1\)su1 Yes
Application cisco unified_communications_manager 11.5\(1\)su1 Yes
Application cisco unified_communications_manager 11.5\(1\)su2 Yes
Application cisco unified_communications_manager 11.5\(1\)su2 Yes
Application cisco unified_communications_manager 11.5\(1\)su3 Yes
Application cisco unified_communications_manager 11.5\(1\)su3 Yes
Application cisco unified_communications_manager 11.5\(1\)su4 Yes
Application cisco unified_communications_manager 11.5\(1\)su4 Yes
Application cisco unified_communications_manager 11.5\(1\)su5 Yes
Application cisco unified_communications_manager 11.5\(1\)su5 Yes
Application cisco unified_communications_manager 11.5\(1\)su7 Yes
Application cisco unified_communications_manager 11.5\(1\)su7 Yes
Application cisco unified_communications_manager 11.5\(1\)su8 Yes
Application cisco unified_communications_manager 11.5\(1\)su8 Yes
Application cisco unified_communications_manager 11.5\(1\)su9 Yes
Application cisco unified_communications_manager 11.5\(1\)su9 Yes
Application cisco unified_communications_manager 12.0\(1\) Yes
Application cisco unified_communications_manager 12.0\(1\) Yes
Application cisco unified_communications_manager 12.5\(1\) Yes
Application cisco unified_communications_manager 12.5\(1\) Yes
Application cisco unified_communications_manager 12.5\(1\)su1 Yes
Application cisco unified_communications_manager 12.5\(1\)su1 Yes
Application cisco unified_communications_manager 12.5\(1\)su2 Yes
Application cisco unified_communications_manager 12.5\(1\)su2 Yes
Application cisco unified_communications_manager 12.5\(1\)su3 Yes
Application cisco unified_communications_manager 12.5\(1\)su3 Yes
Application cisco unified_communications_manager 12.5\(1\)su4 Yes
Application cisco unified_communications_manager 12.5\(1\)su4 Yes
Application cisco unified_communications_manager 12.5\(1\)su5 Yes
Application cisco unified_communications_manager 12.5\(1\)su5 Yes
References