CVE-2013-3433

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-07-18 · updated 2026-06-16

Description

Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02276.

Affected products

Cisco Unified Communications Manager: 7.1(2a), 7.1(2a)su1, 7.1(2b), 7.1(2b)su1, 7.1(3), 7.1(3a) (+49)

References

http://osvdb.org/95404
http://secunia.com/advisories/54249
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
http://www.securityfocus.com/bid/61297
http://osvdb.org/95404
http://secunia.com/advisories/54249
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
http://www.securityfocus.com/bid/61297

Get alerted when CVE-2013-3433 or the next vulnerability affects your stack