CVE-2011-3315

high · 7.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.

7.8

CVSS

25.7%

EPSS (exploit prob.)

98th

EPSS percentile

2011-10-27

Published

AV:N/AC:L/Au:N/C:C/I:N/A:N

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
cisco	unified_ip_interactive_voice_response	all versions
cisco	unified_ip_ivr	6.0(1)
cisco	unified_ip_ivr	7.0(1)
cisco	unified_ip_ivr	7.0(2)
cisco	unified_ip_ivr	8.0(1)
cisco	unified_ip_ivr	8.0(2)
cisco	unified_ip_ivr	8.5(1)
cisco	unified_ccx	6.0(1)
cisco	unified_ccx	7.0(1)
cisco	unified_ccx	7.0(2)
cisco	unified_ccx	8.0(1)
cisco	unified_ccx	8.0(2)
cisco	unified_ccx	8.5(1)
cisco	unified_communications_manager	5.0
cisco	unified_communications_manager	5.1
cisco	unified_communications_manager	5.1(1)
cisco	unified_communications_manager	5.1(1b)
cisco	unified_communications_manager	5.1(1c)
cisco	unified_communications_manager	5.1(2)
cisco	unified_communications_manager	5.1(2a)
cisco	unified_communications_manager	5.1(2b)
cisco	unified_communications_manager	5.1(3)
cisco	unified_communications_manager	5.1(3a)
cisco	unified_communications_manager	5.1(3c)
cisco	unified_communications_manager	5.1(3d)
cisco	unified_communications_manager	5.1(3e)
cisco	unified_communications_manager	5.1.2
cisco	unified_communications_manager	6.0
cisco	unified_communications_manager	6.1(1)
cisco	unified_communications_manager	6.1(1a)
cisco	unified_communications_manager	6.1(1b)
cisco	unified_communications_manager	6.1(2)
cisco	unified_communications_manager	6.1(2)su1
cisco	unified_communications_manager	6.1(2)su1a
cisco	unified_communications_manager	6.1(3)
cisco	unified_communications_manager	6.1(3a)
cisco	unified_communications_manager	6.1(3b)
cisco	unified_communications_manager	6.1(3b)su1
cisco	unified_communications_manager	6.1(4)
cisco	unified_communications_manager	6.1(4)su1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-3315