CVE-2018-0203

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-22 · updated 2026-06-17
Weakness: CWE-19

Description

A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unsolicited email messages, aka a Mail Relay Vulnerability. The vulnerability is due to improper handling of domain information in the affected software. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted requests to the targeted application. A successful exploit could allow the attacker to send email messages to arbitrary addresses. Cisco Bug IDs: CSCvg62215.

Affected products

Cisco Unity Connection: all versions

References

http://www.securityfocus.com/bid/103142
http://www.securitytracker.com/id/1040413
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-cuc
http://www.securityfocus.com/bid/103142
http://www.securitytracker.com/id/1040413
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-cuc

Get alerted when CVE-2018-0203 or the next vulnerability affects your stack