| Package | Affected versions | Patched versions |
|---|---|---|
| unified communications manager | = 6.0= 6.1(1)= 6.1(1a)= 6.1(1b)= 6.1(2)= 6.1(2)su1= 6.1(2)su1a= 6.1(3)= 6.1(3a)= 6.1(3b)= 6.1(3b)su1= 6.1(4)= 6.1(4)su1= 6.1(4a)= 6.1(4a)su2= 6.1(5)= 7.0= 7.0(1)su1= 7.0(1)su1a= 7.0(2)= 7.0(2a)= 7.0(2a)su1= 7.0(2a)su2= 7.1(2a)= 7.1(2a)su1= 7.1(2b)= 7.1(2b)su1= 7.1(3)= 7.1(3a)= 7.1(3a)su1= 7.1(3a)su1a= 7.1(3b)= 7.1(3b)su1= 7.1(3b)su2= 7.1(5)= 7.1(5)su1= 7.1(5)su1a= 7.1(5a)= 7.1(5b)= 8.0= 8.0(2c)= 8.0(2c)su1= 8.0(3) |
/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and CSCti74930.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free