CVE-2013-6688: cisco unified_communications_manager Path Traversal
CVSS: 6.3v2.0MediumModified
Published 16-11-2013Last modified 17-09-2024
Vulnerability summary
CVE-2013-6688 is a medium (CVSS 6.3) Path Traversal vulnerability in cisco unified_communications_manager. EPSS estimates a 2.13% chance of exploitation in the next 30 days, higher than 81.6% of scored vulnerabilities.
CVSS score
6.3/10
010
Medium · v2.0 (NVD)EPSS score
2.13%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 16-11-2013PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:S/C:N/I:C/A:NSourcesSingle source
EPSS trend
Probability
2.13%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
0.00 pp
From 2.13% on 18-09-2026
18-09-202618-10-2026
EPSS score2.13%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- unified_communications_manager≤ 9.1\(1\) | 3.3\(5\) | 3.3\(5\)sr1 | 3.3\(5\)sr2a | 4.1\(3\) | 4.1\(3\)sr1 | 4.1\(3\)sr2 | 4.1\(3\)sr3 | 4.1\(3\)sr4 | 4.2 | 4.2.1 | 4.2.2 | 4.2.3 | 4.2\(3\)sr1 | 4.2.3sr2 | 4.2\(3\)sr2b | 4.3 | 4.3\(1\) | 5.0 | 5.1 | 5.1\(1\) | 5.1\(1b\) | 5.1\(1c\) | 5.1\(2\) | 5.1\(2a\) | 5.1\(2b\) | 5.1\(3\) | 5.1\(3a\) | 5.1\(3c\) | 5.1\(3d\) | 5.1\(3e\) | 6.0 | 6.0\(1\) | 6.0\(1a\) | 6.0\(1b\) | 6.1\(1\) | 6.1\(1a\) | 6.1\(1b\) | 6.1\(2\) | 6.1\(2\)su1 | 6.1\(2\)su1a | 6.1\(3\) | 6.1\(3a\) | 6.1\(3b\) | 6.1\(3b\)su1 | 6.1\(4\) | 6.1\(4\)su1 | 6.1\(4a\) | 6.1\(4a\)su2 | 6.1\(5\) | 6.1\(5\)su1 | 6.1\(5\)su2 | 6.1\(5\)su3 | 7.0\(1\)su1 | 7.0\(1\)su1a | 7.0\(2\) | 7.0\(2a\) | 7.0\(2a\)su1 | 7.0\(2a\)su2 | 7.1\(2a\) | 7.1\(2a\)su1 | 7.1\(2b\) | 7.1\(2b\)su1 | 7.1\(3\) | 7.1\(3a\) | 7.1\(3a\)su1 | 7.1\(3a\)su1a | 7.1\(3b\) | 7.1\(3b\)su1 | 7.1\(3b\)su2 | 7.1\(5\) | 7.1\(5\)su1 | 7.1\(5\)su1a | 7.1\(5a\) | 7.1\(5b\) | 7.1\(5b\)su1 | 7.1\(5b\)su1a | 7.1\(5b\)su2 | 7.1\(5b\)su3 | 7.1\(5b\)su4 | 7.1\(5b\)su5 | 7.1\(5b\)su6 | 8.0 | 8.0\(1\) | 8.0\(2\) | 8.0\(2a\) | 8.0\(2b\) | 8.0\(2c\) | 8.0\(2c\)su1 | 8.0\(3\) | 8.0\(3a\) | 8.0\(3a\)su1 | 8.0\(3a\)su2 | 8.0\(3a\)su3 | 8.5 | 8.5.1 | 8.5\(1\)su1 | 8.5\(1\)su2 | 8.5\(1\)su3 | 8.5\(1\)su4 | 8.5\(1\)su5 | 8.6 | 8.6.1 | 8.6\(1a\) | 8.6.2 | 8.6\(2a\) | 8.6\(2a\)su1 | 8.6\(2a\)su2 | 8.6\(2a\)su3 | 8.6\(3\) | 8.6\(4\) | 9.0\(1\)
1 vendor · 1 product
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688Vendor AdvisoryX Refsource CISCO