CVE-2011-1643
Cisco Security Advisory 20110824-cucm-cups
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.
Cisco Unified Communications Manager (también conocido como CUCM o formerly CallManager) v6.x, v7.x antes de v7.1(5b)su4, v8.0, y v8.5 antes de v8.5(1)su2 y Cisco Unified Presence Server v6.x, v7.x, v8.0, y v8.5 antes de v8.5xnr, permite a atacantes remotos leer datos de la base de datos conectandose a la interfaz de consulta a través de una sesión SSL, también conocido como Bug IDs CSCti81574, CSCto63060, CSCto72183 y CSCto73833.
Cisco Unified Communications Manager (previously known as Cisco CallManager) and Cisco Unified Presence Server contain an open query interface that could allow an unauthenticated, remote attacker to disclose the contents of the underlying databases on affected product versions. Cisco has released free updated software for most supported releases. A security patch file is also available for all supported versions that will remediate this issue. The patch may be applied to active systems without requiring a reload. Customers are advised to apply a fixed version or upgrade to a fixed train. Customers who need to stay on a version for which updated software is not currently available or who can not immediately apply the update are advised to apply the patch. No workarounds are available for this issue.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-04-05 CVE Reserved
- 2011-08-25 CVE Published
- 2024-09-17 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml | 2012-06-15 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.0 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(1a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(1b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(1b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(2\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(2\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(2\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(2\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(2\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(3\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(3a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(3a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(3b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(3b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(3b\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(3b\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(4\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(4\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(4\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(4\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(4a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(4a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(4a\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(4a\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(5\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(5\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(5\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(5\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(5\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(5\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(1\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(1\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(1\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(1\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(2\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(2a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(2a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(2a\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(2a\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(2a\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(2a\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(2a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(2a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(2a\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(2a\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(2b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(2b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(2b\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(2b\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3a\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3a\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3a\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3a\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3b\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3b\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3b\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3b\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5b\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5b\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5b\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5b\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5b\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5b\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5b\)su3 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5b\)su3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.0 Search vendor "Cisco" for product "Unified Communications Manager" and version "8.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.5 Search vendor "Cisco" for product "Unified Communications Manager" and version "8.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "8.5\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.5\(1\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "8.5\(1\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 6.0\(1\) Search vendor "Cisco" for product "Unified Presence Server" and version "6.0\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 6.0\(2\) Search vendor "Cisco" for product "Unified Presence Server" and version "6.0\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 6.0\(3\) Search vendor "Cisco" for product "Unified Presence Server" and version "6.0\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 6.0\(4\) Search vendor "Cisco" for product "Unified Presence Server" and version "6.0\(4\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 6.0\(5\) Search vendor "Cisco" for product "Unified Presence Server" and version "6.0\(5\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 6.0\(6\) Search vendor "Cisco" for product "Unified Presence Server" and version "6.0\(6\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 6.0\(7\) Search vendor "Cisco" for product "Unified Presence Server" and version "6.0\(7\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(1\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(2\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(3\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(4\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(4\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(5\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(5\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(6\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(6\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(7\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(7\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(8\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(8\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 7.0\(9\) Search vendor "Cisco" for product "Unified Presence Server" and version "7.0\(9\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 8.0 Search vendor "Cisco" for product "Unified Presence Server" and version "8.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 8.5 Search vendor "Cisco" for product "Unified Presence Server" and version "8.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 8.5\(1\) Search vendor "Cisco" for product "Unified Presence Server" and version "8.5\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 8.5\(2\) Search vendor "Cisco" for product "Unified Presence Server" and version "8.5\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Presence Server Search vendor "Cisco" for product "Unified Presence Server" | 8.5\(3\) Search vendor "Cisco" for product "Unified Presence Server" and version "8.5\(3\)" | - |
Affected
| ||||||