Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability

Bugtraq ID:	101865
Class:	Design Error
CVE:	CVE-2017-12337
Remote:	Yes
Local:	No
Published:	Nov 16 2017 12:00AM
Updated:	Dec 19 2017 10:37PM
Credit:	Quentin Rhoads-Herrera and Rich Mirch of the State Farm Penetration Testing Team.
Vulnerable:	Cisco Voice OS 0 Cisco Unity Connection 0 Cisco Unified Intelligence Center 0 Cisco Unified Contact Center Express 0 Cisco Unified Communications Manager IM and Presence Service 0 Cisco Unified Communications Manager - Cisco Unified Communication Manager Session Management 0 Cisco SocialMiner 0 Cisco Prime License Manager 0 Cisco MediaSense 0 Cisco Hosted Collaboration Mediation Fulfillment 0 Cisco Finesse 0 Cisco Emergency Responder
Not Vulnerable:

Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability

Cisco Voice OS is prone to a unauthorized access vulnerability.

An attacker can exploit this issue to bypass the security mechanism and gain unauthorized access. This may lead to further attacks.

This issue is tracked by Cisco Bug IDs: CSCvg22923, CSCvg55112, CSCvg55128, CSCvg55145, CSCvg58619, CSCvg64453, CSCvg64456, CSCvg64464, CSCvg64475, and CSCvg68797

Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Voice OS CVE-2017-12337 Unauthorized Access Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Voice Operating System-Based Products Unauthorized Access Vulnerability (Cisco)