cisco-sa-cuc-unauth-afu-FROYsCsD: Cisco Unity Connection Unauthenticated Arbitrary File Upload Vulnerability
First published: Wed Jan 10 2024(Updated: )
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system.This vulnerability is due to a lack of authentication
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unity Connection 8.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-cuc-unauth-afu-FROYsCsD?
The severity of cisco-sa-cuc-unauth-afu-FROYsCsD is critical due to the potential for unauthenticated remote code execution.
How do I fix cisco-sa-cuc-unauth-afu-FROYsCsD?
To fix cisco-sa-cuc-unauth-afu-FROYsCsD, update Cisco Unity Connection to the latest patched version provided by Cisco.
What can an attacker do with the cisco-sa-cuc-unauth-afu-FROYsCsD vulnerability?
An attacker exploiting the cisco-sa-cuc-unauth-afu-FROYsCsD vulnerability can upload arbitrary files and execute commands on the affected system.
Which versions of Cisco Unity Connection are affected by cisco-sa-cuc-unauth-afu-FROYsCsD?
Cisco Unity Connection versions 8.6 are affected by the cisco-sa-cuc-unauth-afu-FROYsCsD vulnerability.
Is authentication required to exploit cisco-sa-cuc-unauth-afu-FROYsCsD?
No, authentication is not required to exploit the vulnerability cisco-sa-cuc-unauth-afu-FROYsCsD.
- agent/type
- agent/first-publish-date
- agent/event
- agent/severity
- agent/references
- agent/weakness
- agent/title
- agent/description
- collector/cisco-recent
- source/Cisco
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco unity connection 8.6