VulnerabilityModified
CVE-2006-2166
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for…
LOW 2.1EPSS 1.62%
Does this matter?
Lower severity and a low EPSS score (1.62%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
- CVSS 2.0
- 2.1 LOWAV:N/AC:H/Au:S/C:N/I:P/A:N
- EPSS
- 1.62% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- cisco/unity express software · cisco/unity express
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/19881Patch, Vendor Advisory
- http://securitytracker.com/id?1016015
- http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtmlVendor Advisory
- http://www.osvdb.org/25165
- http://www.securityfocus.com/bid/17775
- http://www.vupen.com/english/advisories/2006/1613
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26165
- http://secunia.com/advisories/19881Patch, Vendor Advisory
- http://securitytracker.com/id?1016015
- http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtmlVendor Advisory
- http://www.osvdb.org/25165
- http://www.securityfocus.com/bid/17775
- http://www.vupen.com/english/advisories/2006/1613
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26165
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.