CVEvulnerability
CVE-2010-1571
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.
Affected configurations
• cisco unified contact center express 5.0
• cisco unified contact center express 6.0
• cisco unified contact center express 7.0
• cisco customer response solution 5.0
• cisco customer response solution 6.0
• cisco customer response solution 7.0
• cisco unified ip interactive voice response 5.0
• cisco unified ip interactive voice response 6.0
• cisco unified ip interactive voice response 7.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/40680 www.securityfocus.com
- http://www.securitytracker.com/id?1024082 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59277 exchange.xforce.ibmcloud.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/40680 www.securityfocus.com
- http://www.securitytracker.com/id?1024082 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59277 exchange.xforce.ibmcloud.com