What’s Vulnerable › Vulnerabilities

CVE-2012-0366

• Severity: critical (CVSS 9.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-03-01 · updated 2026-06-16
• Weakness: CWE-264

Description

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

Affected products

• Cisco Unity Connection: through 7.1\(3b\)su1; 1.1, 1.1(1), 1.1(1)_es1, 1.1(1)_es12, 1.1(1)_sr1, 1.2 (+41)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cuc

Get alerted when CVE-2012-0366 or the next vulnerability affects your stack