CVE-2012-0366

CRITICAL 9.0CVE-2012-0366 · Published 01/03/2012 · updated 16/06/2026

In short

CVE-2012-0366 is a CRITICAL (CVSS 9.0) vulnerability affecting unity connection (cisco).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unity connection cisco	`= 1.1= 1.1(1)= 1.1(1)_es1= 1.1(1)_es12= 1.1(1)_sr1= 1.2= 1.2(1)= 1.2(1)_es65= 1.2(1)sr2= 2.0= 2.0(1)= 2.1= 2.1(1)= 2.1(2)= 2.1(3)= 2.1(3b)su1= 2.1(4)= 2.1(4)su1= 2.1(4a)= 2.1(4a)su2= 2.1(5)= 2.1(5)su1= 2.1(5)su2= 2.1(5)su3= 6.1(3b)su1= 7.0= 7.0(2)= 7.0(2a)su2= 7.0(2a)su3= 7.1= 7.1(2)= 7.1(2a)= 7.1(2a)su1= 7.1(2b)= 7.1(2b)su1= 7.1(3)= 7.1(3a)= 7.1(3a)su1= 7.1(3a)su1a= 7.1(3b)= 7.1(5)= 7.1(5)su1a= 7.1(5a)= 7.1(5b)= 7.1(5b)su2= 7.1(5b)su3= 7.1(5b)su4≤ 7.1\(3b\)su1`	No fix yet

Description

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc · Vendor Advisory

More vulnerabilities in unity connection

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unity connection

cisco

= 1.1= 1.1(1)= 1.1(1)_es1= 1.1(1)_es12= 1.1(1)_sr1= 1.2= 1.2(1)= 1.2(1)_es65= 1.2(1)sr2= 2.0= 2.0(1)= 2.1= 2.1(1)= 2.1(2)= 2.1(3)= 2.1(3b)su1= 2.1(4)= 2.1(4)su1= 2.1(4a)= 2.1(4a)su2= 2.1(5)= 2.1(5)su1= 2.1(5)su2= 2.1(5)su3= 6.1(3b)su1= 7.0= 7.0(2)= 7.0(2a)su2= 7.0(2a)su3= 7.1= 7.1(2)= 7.1(2a)= 7.1(2a)su1= 7.1(2b)= 7.1(2b)su1= 7.1(3)= 7.1(3a)= 7.1(3a)su1= 7.1(3a)su1a= 7.1(3b)= 7.1(5)= 7.1(5)su1a= 7.1(5a)= 7.1(5b)= 7.1(5b)su2= 7.1(5b)su3= 7.1(5b)su4≤ 7.1\(3b\)su1

No fix yet

More vulnerabilities in unity connection

See all →