unified communications domain manager platform vulnerabilities and exploits

(subscribe to this query)

Platform Software prior to 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote malicious users to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka B...

Cisco Unified Communications Domain Manager 4.4.3 Cisco Unified Communications Domain Manager 4.4.1 Cisco Unified Communications Domain Manager 4.4.2 Cisco Unified Communications Domain Manager 4.4.4

Cisco Unified Communication Domain Manager Platform Software allows remote malicious users to cause a denial of service (CPU consumption, and performance degradation or service outage) via a flood of malformed TCP packets and UDP packets, aka Bug ID CSCup25276.

Cisco Unified Communications Domain Manager -

Cisco Unified Communications Domain Manager Platform Software 4.4(.3) and previous versions allows remote malicious users to cause a denial of service (CPU consumption) by sending crafted TCP packets quickly, aka Bug ID CSCuo42063.

Cisco Unified Communications Domain Manager Platform 4.4\\(.3\\)

Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software prior to 4.4.2 has a hardcoded SSH private key, which makes it easier for remote malicious users to obtain access to the support and root accounts by extracting this key from a binary file found in...

Cisco Unified Cdm Platform Software Cisco Unified Communications Domain Manager -

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software prior to 10 does not properly implement access control, which allows remote malicious users to modify user information via a crafted URL, aka Bug ID CS...

Cisco Unified Communications Domain Manager -Cisco Unified Cdm Application Software 8.1 Cisco Unified Cdm Application Software

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software prior to 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a craft...

Cisco Unified Cdm Application Software Cisco Unified Communications Domain Manager -

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote malicious user to bypass security protections, gain elevated privileges, and execute arbitrary code. The vulnerability is due to insecure key generation during application config...

Cisco Unified Communications Domain Manager

2 Github repositories

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...

3 Github repositories

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...

Apache Commons Collections Apache Commons Collections 4.0

5 Github repositories

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1149 Github repositories28 Articles

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook