CVE-2010-1571: Path Traversal

Published Jun 10, 2010

Updated

Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.

Affected Software

9 affected components

Cisco Unified Contact Center Express=7.0

Cisco Unified Contact Center Express=5.0

Cisco Unified Contact Center Express=6.0

Cisco Customer Response Solution=7.0

Cisco Customer Response Solution=5.0

Cisco Customer Response Solution=6.0

Cisco Unified IP Interactive Voice Response=7.0

Cisco Unified IP Interactive Voice Response=6.0

Cisco Unified IP Interactive Voice Response=5.0

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml

Event History

Jun 10, 2010

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·12:30 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-1571?

CVE-2010-1571 is considered a high severity vulnerability due to its potential for remote file access.

How do I fix CVE-2010-1571?

To fix CVE-2010-1571, you should upgrade to the latest software version as recommended by Cisco.

Which Cisco products are affected by CVE-2010-1571?

CVE-2010-1571 affects Cisco Unified Contact Center Express, Customer Response Solution, and Unified IP Interactive Voice Response across several versions.

Can CVE-2010-1571 be exploited remotely?

Yes, CVE-2010-1571 can be exploited remotely by attackers via a crafted bootstrap message.

What does CVE-2010-1571 allow an attacker to do?

CVE-2010-1571 allows attackers to read arbitrary files from affected systems.