5.3

CVE-2018-0203

EPSS 0.75%
Published 22.02.2018 00:29:00
Last modified 21.11.2024 03:37:43
Source psirt@cisco.com
Teams watchlist Login
Open Login

A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unsolicited email messages, aka a Mail Relay Vulnerability. The vulnerability is due to improper handling of domain information in the affected software. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted requests to the targeted application. A successful exploit could allow the attacker to send email messages to arbitrary addresses. Cisco Bug IDs: CSCvg62215.

Affected products Warnungen 0 Metrics 3 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Unity Connection Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.75%	0.721

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://www.securityfocus.com/bid/103142

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1040413

Third Party Advisory

VDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-cuc

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-0203

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0203

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0203

EUVD