What’s Vulnerable › Vulnerabilities

CVE-2004-1760

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-01-21 · updated 2026-06-16
• Weakness: CWE-287

Description

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Affected products

• Cisco Call Manager: 1.0, 2.0, 3.0, 3.1, 3.1(2), 3.1(3a) (+4)
• Cisco Conference Connection: 1.1(1), 1.2
• Cisco Emergency Responder: 1.1
• Cisco Internet Service Node: all versions
• Cisco Ip Call Center Express Enhanced: 3.0
• Cisco Ip Call Center Express Standard: 3.0
• Cisco Ip Interactive Voice Response: 3.0
• Cisco Personal Assistant: 1.3(1), 1.3(2), 1.3(3), 1.3(4), 1.4(1), 1.4(2)
• IBM Director Agent: 2.2, 3.11
• IBM Mcs-7815-1000: all versions
• IBM Mcs-7815I-2.0: all versions
• IBM Mcs-7835I-2.4: all versions
• IBM Mcs-7835I-3.0: all versions
• IBM X330: 8654, 8674
• IBM X340: all versions
• IBM X342: all versions
• IBM X345: all versions

References

• http://secunia.com/advisories/10696
• http://www.ciac.org/ciac/bulletins/o-066.shtml
• http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
• http://www.kb.cert.org/vuls/id/602734
• http://www.osvdb.org/3692
• http://www.securityfocus.com/bid/9468
• http://www.securitytracker.com/id?1008814
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14900
• http://secunia.com/advisories/10696
• http://www.ciac.org/ciac/bulletins/o-066.shtml
• http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
• http://www.kb.cert.org/vuls/id/602734

Get alerted when CVE-2004-1760 or the next vulnerability affects your stack