CVE-2011-3315
Cisco - 'file' Directory Traversal
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.
Vulnerabilidad de salto de directorio en Cisco Unified Communications Manager (CUCM) v5.x y v6.x anterior v6.1(5)SU2, v7.x anterior v7.1(5b)SU2 y v8.x anterior v8.0(3), y Cisco Unified Contact Center Express (también conocido como Unified CCX o UCCX) y Cisco Unified IP Interactive Voice Response (Unified IP-IVR) anterior a v6.0(1)SR1ES8, v7.0(x) anterior a v7.0(2)ES1, v8.0(x) hasta v8.0(2)SU3, y v8.5(x) anterior a v8.5(1)SU2, permite a atacantes remotos leer ficheros arbitrarios mediante una URL especialmente diseñada, también conocido como Bug IDs CSCth09343 y CSCts44049.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-08-29 CVE Reserved
- 2011-10-26 CVE Published
- 2011-10-26 First Exploit
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (3)
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Unified Ip Interactive Voice Response Search vendor "Cisco" for product "Unified Ip Interactive Voice Response" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Unified Ip Ivr Search vendor "Cisco" for product "Unified Ip Ivr" | 6.0\(1\) Search vendor "Cisco" for product "Unified Ip Ivr" and version "6.0\(1\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Unified Ip Interactive Voice Response Search vendor "Cisco" for product "Unified Ip Interactive Voice Response" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Unified Ip Ivr Search vendor "Cisco" for product "Unified Ip Ivr" | 7.0\(1\) Search vendor "Cisco" for product "Unified Ip Ivr" and version "7.0\(1\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Unified Ip Interactive Voice Response Search vendor "Cisco" for product "Unified Ip Interactive Voice Response" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Unified Ip Ivr Search vendor "Cisco" for product "Unified Ip Ivr" | 7.0\(2\) Search vendor "Cisco" for product "Unified Ip Ivr" and version "7.0\(2\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Unified Ip Interactive Voice Response Search vendor "Cisco" for product "Unified Ip Interactive Voice Response" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Unified Ip Ivr Search vendor "Cisco" for product "Unified Ip Ivr" | 8.0\(1\) Search vendor "Cisco" for product "Unified Ip Ivr" and version "8.0\(1\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Unified Ip Interactive Voice Response Search vendor "Cisco" for product "Unified Ip Interactive Voice Response" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Unified Ip Ivr Search vendor "Cisco" for product "Unified Ip Ivr" | 8.0\(2\) Search vendor "Cisco" for product "Unified Ip Ivr" and version "8.0\(2\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Unified Ip Interactive Voice Response Search vendor "Cisco" for product "Unified Ip Interactive Voice Response" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Unified Ip Ivr Search vendor "Cisco" for product "Unified Ip Ivr" | 8.5\(1\) Search vendor "Cisco" for product "Unified Ip Ivr" and version "8.5\(1\)" | - |
Affected
|
| Cisco Search vendor "Cisco" | Unified Ccx Search vendor "Cisco" for product "Unified Ccx" | 6.0\(1\) Search vendor "Cisco" for product "Unified Ccx" and version "6.0\(1\)" | - |
Safe
| ||||||
| Cisco Search vendor "Cisco" | Unified Ccx Search vendor "Cisco" for product "Unified Ccx" | 7.0\(1\) Search vendor "Cisco" for product "Unified Ccx" and version "7.0\(1\)" | - |
Safe
| ||||||
| Cisco Search vendor "Cisco" | Unified Ccx Search vendor "Cisco" for product "Unified Ccx" | 7.0\(2\) Search vendor "Cisco" for product "Unified Ccx" and version "7.0\(2\)" | - |
Safe
| ||||||
| Cisco Search vendor "Cisco" | Unified Ccx Search vendor "Cisco" for product "Unified Ccx" | 8.0\(1\) Search vendor "Cisco" for product "Unified Ccx" and version "8.0\(1\)" | - |
Safe
| ||||||
| Cisco Search vendor "Cisco" | Unified Ccx Search vendor "Cisco" for product "Unified Ccx" | 8.0\(2\) Search vendor "Cisco" for product "Unified Ccx" and version "8.0\(2\)" | - |
Safe
| ||||||
| Cisco Search vendor "Cisco" | Unified Ccx Search vendor "Cisco" for product "Unified Ccx" | 8.5\(1\) Search vendor "Cisco" for product "Unified Ccx" and version "8.5\(1\)" | - |
Safe
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.0 Search vendor "Cisco" for product "Unified Communications Manager" and version "5.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1 Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(1b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(1b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(1c\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(1c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(2\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(2a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(2a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(2b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(2b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(3\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(3a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(3a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(3c\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(3c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(3d\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(3d\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1\(3e\) Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1\(3e\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 5.1.2 Search vendor "Cisco" for product "Unified Communications Manager" and version "5.1.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.0 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(1a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(1b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(1b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(2\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(2\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(2\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(2\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(2\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(3\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(3a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(3a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(3b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(3b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(3b\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(3b\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(4\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(4\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(4\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(4\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(4a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(4a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(4a\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(4a\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(5\) Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(5\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 6.1\(5\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "6.1\(5\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(1\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(1\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(1\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(1\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(2\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(2a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(2a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(2a\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(2a\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.0\(2a\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.0\(2a\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(2a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(2a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(2a\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(2a\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(2b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(2b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(2b\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(2b\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3a\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3a\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3a\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3a\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3b\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3b\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(3b\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(3b\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5b\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5b\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 7.1\(5b\)su1a Search vendor "Cisco" for product "Unified Communications Manager" and version "7.1\(5b\)su1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.0 Search vendor "Cisco" for product "Unified Communications Manager" and version "8.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.0\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "8.0\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.0\(2\) Search vendor "Cisco" for product "Unified Communications Manager" and version "8.0\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.0\(2a\) Search vendor "Cisco" for product "Unified Communications Manager" and version "8.0\(2a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.0\(2b\) Search vendor "Cisco" for product "Unified Communications Manager" and version "8.0\(2b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.0\(2c\) Search vendor "Cisco" for product "Unified Communications Manager" and version "8.0\(2c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 8.0\(2c\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "8.0\(2c\)su1" | - |
Affected
| ||||||