A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM &amp; Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by sending a SOAP API request with crafted parameters to an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the underlying Linux operating system of the affected device.

The version of Cisco Unified Communications Manager IM & Presence Service installed on the remote host is affected by a remote code execution vulnerability due to improper sanitization of user-supplied input. An authenticated, remote attacker can exploit this, by sending a SOAP API request with crafted parameters, in order to execute arbitrary code with root privileges on the underlying operating system.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Cisco Unity Connection installed on the remote host is affected by a remote code execution vulnerability due to improper sanitization of user-supplied input. An authenticated, remote attacker can exploit this, by sending a SOAP API request with crafted parameters, in order to execute arbitrary code with root privileges on the underlying operating system.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Cisco Unified Communications Manager installed on the remote host is affected by a remote code execution vulnerability due to improper sanitization of user-supplied input. An authenticated, remote attacker can exploit this, by sending a SOAP API request with crafted parameters, in order to execute arbitrary code with root privileges on the underlying operating system.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
148970	Cisco Unified Communications Manager IM&P RCE (cisco-sa-cucm-rce-pqVYwyb)	Nessus	CISCO	high
148969	Cisco Unity Connection RCE (cisco-sa-cucm-rce-pqVYwyb)	Nessus	CISCO	high
148968	Cisco Unified Communications Manager RCE (cisco-sa-cucm-rce-pqVYwyb)	Nessus	CISCO	high

Detections

Analytics

CVE-2021-1362

high

Tenable Plugins

high

high

high