CVE-2011-1607

Published: May 3, 2011Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.

Affected (45)

Products: Cisco: Unified Communications Manager

Cisco

1 product

Unified Communications Manager

Configuration A

17 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Unified Communications Manager	Version 6.0
Cisco Unified Communications Manager	Version 6.1(1)
Cisco Unified Communications Manager	Version 6.1(1a)
Cisco Unified Communications Manager	Version 6.1(1b)
Cisco Unified Communications Manager	Version 6.1(2)
Cisco Unified Communications Manager	Version 6.1(2)su1
Cisco Unified Communications Manager	Version 6.1(2)su1a
Cisco Unified Communications Manager	Version 6.1(3)
Cisco Unified Communications Manager	Version 6.1(3a)
Cisco Unified Communications Manager	Version 6.1(3b)
Cisco Unified Communications Manager	Version 6.1(3b)su1
Cisco Unified Communications Manager	Version 6.1(4)
Cisco Unified Communications Manager	Version 6.1(4)su1
Cisco Unified Communications Manager	Version 6.1(4a)
Cisco Unified Communications Manager	Version 6.1(4a)su2
Cisco Unified Communications Manager	Version 6.1(5)
Cisco Unified Communications Manager	Version 6.1(5)su1

Running on/with	Platform Versions
Cisco Unified Communications Manager	Version 6.1(5)su2

Configuration B

23 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Communications Manager	Version 7.0(1)su1
Cisco Unified Communications Manager	Version 7.0(1)su1a
Cisco Unified Communications Manager	Version 7.0(2)
Cisco Unified Communications Manager	Version 7.0(2a)
Cisco Unified Communications Manager	Version 7.0(2a)su1
Cisco Unified Communications Manager	Version 7.0(2a)su2
Cisco Unified Communications Manager	Version 7.1(2a)
Cisco Unified Communications Manager	Version 7.1(2a)su1
Cisco Unified Communications Manager	Version 7.1(2b)
Cisco Unified Communications Manager	Version 7.1(2b)su1
Cisco Unified Communications Manager	Version 7.1(3)
Cisco Unified Communications Manager	Version 7.1(3a)
Cisco Unified Communications Manager	Version 7.1(3a)su1
Cisco Unified Communications Manager	Version 7.1(3a)su1a
Cisco Unified Communications Manager	Version 7.1(3b)
Cisco Unified Communications Manager	Version 7.1(3b)su1
Cisco Unified Communications Manager	Version 7.1(3b)su2
Cisco Unified Communications Manager	Version 7.1(5)
Cisco Unified Communications Manager	Version 7.1(5)su1
Cisco Unified Communications Manager	Version 7.1(5)su1a
Cisco Unified Communications Manager	Version 7.1(5a)
Cisco Unified Communications Manager	Version 7.1(5b)
Cisco Unified Communications Manager	Version 7.1(5b)su2

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Communications Manager	Version 8.0(2c)
Cisco Unified Communications Manager	Version 8.0(2c)su1
Cisco Unified Communications Manager	Version 8.0(3)
Cisco Unified Communications Manager	Version 8.0(3a)
Cisco Unified Communications Manager	Version 8.5