CVE-2013-1240 — MEDIUM (4.6)

Vulnerability Description

The command-line interface in Cisco Unified Communications Manager (CUCM) does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770.

CVSS Score

4.6

MEDIUM

AV:L/AC:L/Au:S/C:C/I:N/A:N

Confidentiality

COMPLETE

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Cisco	Unified Communications Manager	All versions

Related Weaknesses (CWE)

CWE-20

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1240Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1240Vendor Advisory

FAQ

What is CVE-2013-1240?

CVE-2013-1240 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The command-line interface in Cisco Unified Communications Manager (CUCM) does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25...

How severe is CVE-2013-1240?

CVE-2013-1240 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-1240?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager.