CVE-2013-6689: Input Validation
Published Nov 16, 2013
·Updated
Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.
Affected Software
113 affected components
Cisco Unified Communications Manager<=9.1\(1\)
Cisco Unified Communications Manager=3.3\(5\)
Cisco Unified Communications Manager=3.3\(5\)sr1
Cisco Unified Communications Manager=3.3\(5\)sr2a
Cisco Unified Communications Manager=4.1\(3\)
Cisco Unified Communications Manager=4.1\(3\)sr1
Cisco Unified Communications Manager=4.1\(3\)sr2
Cisco Unified Communications Manager=4.1\(3\)sr3
Cisco Unified Communications Manager=4.1\(3\)sr4
Cisco Unified Communications Manager=4.2
Cisco Unified Communications Manager=4.2.1
Cisco Unified Communications Manager=4.2.2
Cisco Unified Communications Manager=4.2.3
Cisco Unified Communications Manager=4.2.3sr1
Cisco Unified Communications Manager=4.2.3sr2
Cisco Unified Communications Manager=4.2.3sr2b
Cisco Unified Communications Manager=4.3
Cisco Unified Communications Manager=4.3\(1\)
Cisco Unified Communications Manager=5.0
Cisco Unified Communications Manager=5.1
Cisco Unified Communications Manager=5.1\(1\)
Cisco Unified Communications Manager=5.1\(1b\)
Cisco Unified Communications Manager=5.1\(1c\)
Cisco Unified Communications Manager=5.1\(2\)
Cisco Unified Communications Manager=5.1\(2a\)
Cisco Unified Communications Manager=5.1\(2b\)
Cisco Unified Communications Manager=5.1\(3\)
Cisco Unified Communications Manager=5.1\(3a\)
Cisco Unified Communications Manager=5.1\(3c\)
Cisco Unified Communications Manager=5.1\(3d\)
Cisco Unified Communications Manager=5.1\(3e\)
Cisco Unified Communications Manager=5.1.2
Cisco Unified Communications Manager=6.0
Cisco Unified Communications Manager=6.0\(1\)
Cisco Unified Communications Manager=6.0\(1a\)
Cisco Unified Communications Manager=6.0\(1b\)
Cisco Unified Communications Manager=6.1\(1\)
Cisco Unified Communications Manager=6.1\(1a\)
Cisco Unified Communications Manager=6.1\(1b\)
Cisco Unified Communications Manager=6.1\(2\)
Cisco Unified Communications Manager=6.1\(2\)su1
Cisco Unified Communications Manager=6.1\(2\)su1a
Cisco Unified Communications Manager=6.1\(3\)
Cisco Unified Communications Manager=6.1\(3a\)
Cisco Unified Communications Manager=6.1\(3b\)
Cisco Unified Communications Manager=6.1\(3b\)su1
Cisco Unified Communications Manager=6.1\(4\)
Cisco Unified Communications Manager=6.1\(4\)su1
Cisco Unified Communications Manager=6.1\(4a\)
Cisco Unified Communications Manager=6.1\(4a\)su2
Cisco Unified Communications Manager=6.1\(5\)
Cisco Unified Communications Manager=6.1\(5\)su1
Cisco Unified Communications Manager=6.1\(5\)su2
Cisco Unified Communications Manager=6.1\(5\)su3
Cisco Unified Communications Manager=7.0\(1\)su1
Cisco Unified Communications Manager=7.0\(1\)su1a
Cisco Unified Communications Manager=7.0\(2\)
Cisco Unified Communications Manager=7.0\(2a\)
Cisco Unified Communications Manager=7.0\(2a\)su1
Cisco Unified Communications Manager=7.0\(2a\)su2
Cisco Unified Communications Manager=7.1\(2a\)
Cisco Unified Communications Manager=7.1\(2a\)su1
Cisco Unified Communications Manager=7.1\(2b\)
Cisco Unified Communications Manager=7.1\(2b\)su1
Cisco Unified Communications Manager=7.1\(3\)
Cisco Unified Communications Manager=7.1\(3a\)
Cisco Unified Communications Manager=7.1\(3a\)su1
Cisco Unified Communications Manager=7.1\(3a\)su1a
Cisco Unified Communications Manager=7.1\(3b\)
Cisco Unified Communications Manager=7.1\(3b\)su1
Cisco Unified Communications Manager=7.1\(3b\)su2
Cisco Unified Communications Manager=7.1\(5\)
Cisco Unified Communications Manager=7.1\(5\)su1
Cisco Unified Communications Manager=7.1\(5\)su1a
Cisco Unified Communications Manager=7.1\(5a\)
Cisco Unified Communications Manager=7.1\(5b\)
Cisco Unified Communications Manager=7.1\(5b\)su1
Cisco Unified Communications Manager=7.1\(5b\)su1a
Cisco Unified Communications Manager=7.1\(5b\)su2
Cisco Unified Communications Manager=7.1\(5b\)su3
Cisco Unified Communications Manager=7.1\(5b\)su4
Cisco Unified Communications Manager=7.1\(5b\)su5
Cisco Unified Communications Manager=7.1\(5b\)su6
Cisco Unified Communications Manager=8.0
Cisco Unified Communications Manager=8.0\(1\)
Cisco Unified Communications Manager=8.0\(2\)
Cisco Unified Communications Manager=8.0\(2a\)
Cisco Unified Communications Manager=8.0\(2b\)
Cisco Unified Communications Manager=8.0\(2c\)
Cisco Unified Communications Manager=8.0\(2c\)su1
Cisco Unified Communications Manager=8.0\(3\)
Cisco Unified Communications Manager=8.0\(3a\)
Cisco Unified Communications Manager=8.0\(3a\)su1
Cisco Unified Communications Manager=8.0\(3a\)su2
Cisco Unified Communications Manager=8.0\(3a\)su3
Cisco Unified Communications Manager=8.5
Cisco Unified Communications Manager=8.5\(1\)
Cisco Unified Communications Manager=8.5\(1\)su1
Cisco Unified Communications Manager=8.5\(1\)su2
Cisco Unified Communications Manager=8.5\(1\)su3
Cisco Unified Communications Manager=8.5\(1\)su4
Cisco Unified Communications Manager=8.5\(1\)su5
Cisco Unified Communications Manager=8.6
Cisco Unified Communications Manager=8.6\(1\)
Cisco Unified Communications Manager=8.6\(1a\)
Cisco Unified Communications Manager=8.6\(2\)
Cisco Unified Communications Manager=8.6\(2a\)
Cisco Unified Communications Manager=8.6\(2a\)su1
Cisco Unified Communications Manager=8.6\(2a\)su2
Cisco Unified Communications Manager=8.6\(2a\)su3
Cisco Unified Communications Manager=8.6\(3\)
Cisco Unified Communications Manager=8.6\(4\)
Cisco Unified Communications Manager=9.0\(1\)
Event History
Nov 16, 2013
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Nov 18, 2013
Data Sourced
via NVD·03:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6689?
The severity of CVE-2013-6689 is categorized as high due to the potential for unauthorized access to critical files.
2
How do I fix CVE-2013-6689?
To fix CVE-2013-6689, upgrade Cisco Unified Communications Manager to a patched version that addresses this vulnerability.
3
What systems are affected by CVE-2013-6689?
CVE-2013-6689 affects Cisco Unified Communications Manager versions up to and including 9.1(1) and several earlier versions.
4
Can CVE-2013-6689 be exploited remotely?
CVE-2013-6689 cannot be exploited remotely as it requires local access to the affected Cisco devices.
5
What are the potential impacts of CVE-2013-6689?
The potential impacts of CVE-2013-6689 include unauthorized file modification, reading, or creation, which could lead to data breaches or system misconfiguration.