CVE-2021-1406
Cisco Unified Communications Manager Information Disclosure Vulnerability
Severity Score
4.9
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion of sensitive information in downloadable files. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a specific set of commands. A successful exploit could allow the attacker to obtain hashed credentials of system users. To exploit this vulnerability an attacker would need to have valid user credentials with elevated privileges.
Una vulnerabilidad en Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME), podría permitir a un atacante remoto autenticado acceder a información confidencial en un dispositivo afectado. La vulnerabilidad es debido a una inclusión inapropiada de información confidencial en archivos descargables. Un atacante podría explotar esta vulnerabilidad al autenticarse en un dispositivo afectado y emitir un ajuste específico de comandos. Una explotación con éxito podría permitir al atacante obtener credenciales hash de los usuarios del sistema. Para explotar esta vulnerabilidad, un atacante necesitaría tener credenciales de usuario válidas con privilegios elevados
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-13 CVE Reserved
- 2021-04-08 CVE Published
- 2023-07-01 EPSS Updated
- 2024-11-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\) Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\) Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su1" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su2" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su2a Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su2a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su2a Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su2a" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su3 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su3 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su3" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su3a Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su3a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su3a Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su3a" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su4 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su4 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su4" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su4a Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su4a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su4a Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su4a" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su5 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su6 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su6" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su6 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su6" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su6a Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su6a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su6a Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su6a" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su7 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su7" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su7 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su7" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su8 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su8" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su8 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su8" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su9 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su9" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su9 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su9" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su10 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su10" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 10.5\(2\)su10 Search vendor "Cisco" for product "Unified Communications Manager" and version "10.5\(2\)su10" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su1" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su2" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su3 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su3 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su3" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su4 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su4 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su4" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su5 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su5 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su5" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su7 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su7" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su7 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su7" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su8 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su8" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su8 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su8" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su9 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su9" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 11.5\(1\)su9 Search vendor "Cisco" for product "Unified Communications Manager" and version "11.5\(1\)su9" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.0\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "12.0\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.0\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "12.0\(1\)" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\) Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su1 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su1" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su2 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su2" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su3 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su3 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su3" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su4 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su4 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su4" | session_management |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su5 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Communications Manager Search vendor "Cisco" for product "Unified Communications Manager" | 12.5\(1\)su5 Search vendor "Cisco" for product "Unified Communications Manager" and version "12.5\(1\)su5" | session_management |
Affected
| ||||||