CVE-2013-3433
N/A
Published: July 18, 2013 at 12:00 AM UTC
Updated: June 16, 2026 at 11:55 PM UTC
1 product affected across 1 vendorUnified Communications Manager
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02276.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
7.1(2a)7.1(2a)su17.1(2b)7.1(2b)su17.1(3)7.1(3a)7.1(3a)su17.1(3a)su1a7.1(3b)7.1(3b)su17.1(3b)su27.1(5)7.1(5)su17.1(5)su1a7.1(5a)7.1(5b)7.1(5b)su17.1(5b)su1a7.1(5b)su27.1(5b)su37.1(5b)su47.1(5b)su57.1(5b)su68.08.0(1)8.0(2)8.0(2a)8.0(2b)8.0(2c)8.0(2c)su18.0(3)8.0(3a)8.0(3a)su18.0(3a)su28.0(3a)su38.58.5(1)8.5(1)su18.5(1)su28.5(1)su38.5(1)su48.5(1)su58.68.6(1)8.6(1a)8.6(2)8.6(2a)8.6(2a)su18.6(2a)su28.6(2a)su38.6(3)8.6(4)9.0(1)9.1(1)9.1.1(a)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucmQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card