CVE-2021-1226: falha de média gravidade em Cisco Emergency Responder
Cisco Unified Communications Products Information Disclosure Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.9%
A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Cisco · Cisco Emergency ResponderCVEs relacionadas — Cisco Emergency Responder
No mesmo produto, das mais perigosas para as menos.
CVE-2023-20101CRITICALCVE-2023-20101EPSS 2.6%CVE-2024-20352MEDIUMCVE-2024-20352EPSS 1.5%CVE-2018-15403—Multiple Cisco Unified Communications Products Open Redirect VulnerabilityEPSS 1.2%CVE-2023-20259HIGHCVE-2023-20259EPSS 0.8%CVE-2019-16025MEDIUMCisco Emergency Responder Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2026-76473CRITICALCisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.EPSS 0.5%