CVE-2011-3315
EXPLOITED NUCLEICisco Unified Communications Manager 5.x-8.x Path Traversal via Crafted URL
Title source: llmExploitation Summary
CVE-2011-3315 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including Sandro Gauci. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in multiple Cisco products, allowing an attacker to read arbitrary files outside the intended directory. The PoC provides example URLs to fetch sensitive files like /etc/passwd and platformConfig.xml.
Description
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in multiple Cisco products, allowing an attacker to read arbitrary files outside the intended directory. The PoC provides example URLs to fetch sensitive files like /etc/passwd and platformConfig.xml.
This repository contains the RouterSploit framework, an exploitation toolkit for embedded devices, including modules for exploits, credential testing, scanners, and payloads. The framework is designed to test and exploit vulnerabilities in routers and other embedded systems.