CVE-2013-3402: Code Injection

Published Jul 18, 2013

Updated

An unspecified function in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary commands via unknown vectors, aka Bug ID CSCuh73440.

Affected Software

56 affected components

Cisco Unified Communications Manager=7.1\(2a\)

Cisco Unified Communications Manager=7.1\(2a\)su1

Cisco Unified Communications Manager=7.1\(2b\)

Cisco Unified Communications Manager=7.1\(2b\)su1

Cisco Unified Communications Manager=7.1\(3\)

Cisco Unified Communications Manager=7.1\(3a\)

Cisco Unified Communications Manager=7.1\(3a\)su1

Cisco Unified Communications Manager=7.1\(3a\)su1a

Cisco Unified Communications Manager=7.1\(3b\)

Cisco Unified Communications Manager=7.1\(3b\)su1

Cisco Unified Communications Manager=7.1\(3b\)su2

Cisco Unified Communications Manager=7.1\(5\)

Cisco Unified Communications Manager=7.1\(5\)su1

Cisco Unified Communications Manager=7.1\(5\)su1a

Cisco Unified Communications Manager=7.1\(5a\)

Cisco Unified Communications Manager=7.1\(5b\)

Cisco Unified Communications Manager=7.1\(5b\)su1

Cisco Unified Communications Manager=7.1\(5b\)su1a

Cisco Unified Communications Manager=7.1\(5b\)su2

Cisco Unified Communications Manager=7.1\(5b\)su3

Cisco Unified Communications Manager=7.1\(5b\)su4

Cisco Unified Communications Manager=7.1\(5b\)su5

Cisco Unified Communications Manager=7.1\(5b\)su6

Cisco Unified Communications Manager=8.0

Cisco Unified Communications Manager=8.0\(1\)

Cisco Unified Communications Manager=8.0\(2\)

Cisco Unified Communications Manager=8.0\(2a\)

Cisco Unified Communications Manager=8.0\(2b\)

Cisco Unified Communications Manager=8.0\(2c\)

Cisco Unified Communications Manager=8.0\(2c\)su1

Cisco Unified Communications Manager=8.0\(3\)

Cisco Unified Communications Manager=8.0\(3a\)

Cisco Unified Communications Manager=8.0\(3a\)su1

Cisco Unified Communications Manager=8.0\(3a\)su2

Cisco Unified Communications Manager=8.0\(3a\)su3

Cisco Unified Communications Manager=8.5

Cisco Unified Communications Manager=8.5\(1\)

Cisco Unified Communications Manager=8.5\(1\)su1

Cisco Unified Communications Manager=8.5\(1\)su2

Cisco Unified Communications Manager=8.5\(1\)su3

Cisco Unified Communications Manager=8.5\(1\)su4

Cisco Unified Communications Manager=8.5\(1\)su5

Cisco Unified Communications Manager=8.6

Cisco Unified Communications Manager=8.6\(1\)

Cisco Unified Communications Manager=8.6\(1a\)

Cisco Unified Communications Manager=8.6\(2\)

Cisco Unified Communications Manager=8.6\(2a\)

Cisco Unified Communications Manager=8.6\(2a\)su1

Cisco Unified Communications Manager=8.6\(2a\)su2

Cisco Unified Communications Manager=8.6\(2a\)su3

Cisco Unified Communications Manager=8.6\(3\)

Cisco Unified Communications Manager=8.6\(4\)

Cisco Unified Communications Manager=9.0\(1\)

Cisco Unified Communications Manager=9.1\(1\)

Cisco Unified Communications Manager=9.1\(2\)

Cisco Unified Communications Manager=9.1.1\(a\)

Event History

Jul 18, 2013

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3402?

CVE-2013-3402 is rated as a high-severity vulnerability that can allow remote authenticated users to execute arbitrary commands.

How do I fix CVE-2013-3402?

To fix CVE-2013-3402, upgrade Cisco Unified Communications Manager to a version that is not affected, such as the latest release per Cisco's advisory.

What versions of Cisco Unified Communications Manager are affected by CVE-2013-3402?

CVE-2013-3402 affects Cisco Unified Communications Manager versions 7.1(x) through 9.1(2).

Can CVE-2013-3402 be exploited remotely?

Yes, CVE-2013-3402 can be exploited by remote authenticated users, which poses a significant security risk.

What are the potential impacts of CVE-2013-3402?

The potential impacts of CVE-2013-3402 include unauthorized execution of arbitrary commands, leading to system compromise.