Medium severity · published Feb 9, 2016
CVE-2016-1319
Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence…
5.3
CVSS
0.8%
EPSS
No
On KEV
Description
Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GF
Gs1900-10hp Firmware · Zyxel
before 2.50\(aazi.0\)c0 · source: NVD
KF
Keymouse Firmware · Zzinc
3.08; 3.08 · source: NVD
OP
Opensolaris · Sun
snv_124; snv_124 · source: NVD
XF
X14j Firmware · Samsung
t-ms14jakucb-1102.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1319
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1319
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-ucm
www.securitytracker.com
http://www.securitytracker.com/id/1034958
www.securitytracker.com
http://www.securitytracker.com/id/1034959
www.securitytracker.com
http://www.securitytracker.com/id/1034960
More from X14j Firmware
8.8
CVE-2016-1010
Adobe Flash Player and AIR Integer Overflow Vulnerability
9.8
CVE-2015-5729
The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote…
9.8
CVE-2016-0729
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote…
9.8
CVE-2016-1329
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows…
8.8
CVE-2016-1005
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK…