CVE-2002-1190
Cisco Unity 2.x-3.x - Unauthenticated Arbitrary Call Placement via Default Accounts
Title source: llmDescription
Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44545
Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10282.php
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml
Scores
EPSS
0.0161
EPSS Percentile
73.5%
Details
Status
published
Products (8)
cisco/unity_server
2.0
cisco/unity_server
2.1
cisco/unity_server
2.2
cisco/unity_server
2.3
cisco/unity_server
2.4
cisco/unity_server
2.46
cisco/unity_server
3.0
cisco/unity_server
3.1
Published
Oct 28, 2002
Tracked Since
Feb 18, 2026