CVE-2010-1571

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-06-10 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.

Affected products

Cisco Customer Response Solution: 5.0, 6.0, 7.0
Cisco Unified Contact Center Express: 5.0, 6.0, 7.0
Cisco Unified Ip Interactive Voice Response: 5.0, 6.0, 7.0

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml
http://www.securityfocus.com/bid/40680
http://www.securitytracker.com/id?1024082
https://exchange.xforce.ibmcloud.com/vulnerabilities/59277
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml
http://www.securityfocus.com/bid/40680
http://www.securitytracker.com/id?1024082
https://exchange.xforce.ibmcloud.com/vulnerabilities/59277

Get alerted when CVE-2010-1571 or the next vulnerability affects your stack