Cisco Unity Express CVE-2018-15381 Arbitrary Command Execution Vulnerability
BID:105876
CVE-2018-15381 |Info
Cisco Unity Express CVE-2018-15381 Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 105876 |
| Class: | Input Validation Error |
| CVE: |
CVE-2018-15381 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 07 2018 12:00AM |
| Updated: | Nov 07 2018 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Cisco Unity Express 9.0 Cisco Unity Express 9.0(3) |
| Not Vulnerable: |
Cisco Unity Express 9.0.6 |
Discussion
Cisco Unity Express CVE-2018-15381 Arbitrary Command Execution Vulnerability
Cisco Unity Express is prone to an arbitrary command-execution vulnerability.
An attacker can exploit this issue to execute arbitrary command on the affected device with root privileges.
Cisco Unity Express versions prior to 9.0.6 are vulnerable.
Cisco Unity Express is prone to an arbitrary command-execution vulnerability.
An attacker can exploit this issue to execute arbitrary command on the affected device with root privileges.
Cisco Unity Express versions prior to 9.0.6 are vulnerable.
Exploit / POC
Cisco Unity Express CVE-2018-15381 Arbitrary Command Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco Unity Express CVE-2018-15381 Arbitrary Command Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.