CVE-2010-1571
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:customer_response_solution
- cisco:unified_contact_center_express
- cisco:unified_ip_interactive_voice_response
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml
- http://www.securityfocus.com/bid/40680
- http://www.securitytracker.com/id?1024082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59277
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml