Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.106801
Category:CISCO
Title:Cisco CallManager Express Unauthorized Access Vulnerability
Summary:A vulnerability in Cisco IOS Software for Cisco CallManager Express (CME);could allow an unauthenticated, remote attacker to make unauthorized phone calls.
Description:Summary:
A vulnerability in Cisco IOS Software for Cisco CallManager Express (CME)
could allow an unauthenticated, remote attacker to make unauthorized phone calls.

Vulnerability Insight:
The vulnerability is due to a configuration restriction in the toll-fraud
protections component of the affected software.

Vulnerability Impact:
An attacker could exploit this vulnerability to place unauthorized,
long-distance phone calls by using an affected system.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-6624
BugTraq ID: 98283
http://www.securityfocus.com/bid/98283
http://www.securitytracker.com/id/1038398
CopyrightCopyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.