CVEvulnerability
CVE-2018-0203
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-02-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-19
Description
A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unsolicited email messages, aka a Mail Relay Vulnerability. The vulnerability is due to improper handling of domain information in the affected software. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted requests to the targeted application. A successful exploit could allow the attacker to send email messages to arbitrary addresses. Cisco Bug IDs: CSCvg62215.
Affected configurations
• cisco unity connection
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/103142 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040413 Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-cuc Vendor Advisory
- http://www.securityfocus.com/bid/103142 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040413 Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-cuc Vendor Advisory