Unscored severity · published Jun 10, 2010
CVE-2010-1571
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Customer Response Solution · Cisco
5.0; 6.0; 7.0 · source: NVD
UC
Unified Contact Center Express · Cisco
5.0; 6.0; 7.0 · source: NVD
UI
Unified IP Interactive Voice Response · Cisco
5.0; 6.0; 7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1571
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1571
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/40680
www.securitytracker.com
http://www.securitytracker.com/id?1024082
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/59277
More from Customer Response Solution
–
CVE-2010-1570
The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before…