CVE-2011-3315
CVE-2011-3315
Vexday Risk Score
65High priority
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 26.4%KEV nãoPoC públicaNuclei simMetasploit —Patch referenciado
Lifecycle
26 Oct 2011Public PoC
27 Oct 2011Published on NVD
Recommendation: Patch as soon as possible — active exploitation confirmed.
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/36256unverifiedvulncheckvulncheck.com/xdb/9a5914dbfda8unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.