CVE-2013-3434

Cisco CUCM <9.1.1a - Privilege Escalation

Title source: llm
STIX 2.1

Description

Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02242.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/95403
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/61296
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54249

Scores

EPSS 0.0036
EPSS Percentile 28.2%

Details

Status published
Products (50)
cisco/unified_communications_manager 7.1\(2a\)
cisco/unified_communications_manager 7.1\(2a\)su1
cisco/unified_communications_manager 7.1\(2b\)
cisco/unified_communications_manager 7.1\(2b\)su1
cisco/unified_communications_manager 7.1\(3\)
cisco/unified_communications_manager 7.1\(3a\)
cisco/unified_communications_manager 7.1\(3a\)su1
cisco/unified_communications_manager 7.1\(3a\)su1a
cisco/unified_communications_manager 7.1\(3b\)
cisco/unified_communications_manager 7.1\(3b\)su1
... and 40 more
Published Jul 18, 2013
Tracked Since Feb 18, 2026