CVE-2010-1571

Published: Jun 10, 2010Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.

Affected (9)

Products: Cisco: Unified Contact Center Express, Customer Response Solution, Unified Ip Interactive Voice Response

Cisco

3 products

Unified Contact Center Express

Customer Response Solution

Unified Ip Interactive Voice Response

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Contact Center Express	Version 5.0
Cisco Unified Contact Center Express	Version 6.0
Cisco Unified Contact Center Express	Version 7.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Customer Response Solution	Version 5.0
Cisco Customer Response Solution	Version 6.0
Cisco Customer Response Solution	Version 7.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Ip Interactive Voice Response	Version 5.0
Cisco Unified Ip Interactive Voice Response	Version 6.0
Cisco Unified Ip Interactive Voice Response	Version 7.0