Cisco CUCM Improper Access Control Vulnerability (CVE-2021-36644) Advisory

Cisco Unified Communications Manager Improper Access Control Vulnerability Vulnerability Overview Vulnerability Name: Cisco Unified Communications Manager Improper Access Control Vulnerability Vulnerability ID: CVE-2021-36644 Severity: Medium CVSS Score: 6.5 Release Date: October 26, 2021 Last Updated: October 26, 2021 Vulnerability Description: Cisco Unified Communications Manager (CUCM) contains an improper access control vulnerability. This vulnerability allows an unauthenticated attacker to exploit it by sending a crafted HTTP request to the affected system. Successful exploitation of this vulnerability may lead to unauthorized access. Scope of Impact Affected Products: - Cisco Unified Communications Manager 12.5(1) - Cisco Unified Communications Manager 12.5(2) - Cisco Unified Communications Manager 12.5(3) - Cisco Unified Communications Manager 12.5(4) - Cisco Unified Communications Manager 12.5(5) - Cisco Unified Communications Manager 12.5(6) - Cisco Unified Communications Manager 12.5(7) - Cisco Unified Communications Manager 12.5(8) - Cisco Unified Communications Manager 12.5(9) - Cisco Unified Communications Manager 12.5(10) - Cisco Unified Communications Manager 12.5(11) - Cisco Unified Communications Manager 12.5(12) - Cisco Unified Communications Manager 12.5(13) - Cisco Unified Communications Manager 12.5(14) - Cisco Unified Communications Manager 12.5(15) - Cisco Unified Communications Manager 12.5(16) - Cisco Unified Communications Manager 12.5(17) - Cisco Unified Communications Manager 12.5(18) - Cisco Unified Communications Manager 12.5(19) - Cisco Unified Communications Manager 12.5(20) - Cisco Unified Communications Manager 12.5(21) - Cisco Unified Communications Manager 12.5(22) - Cisco Unified Communications Manager 12.5(23) - Cisco Unified Communications Manager 12.5(24) - Cisco Unified Communications Manager 12.5(25) - Cisco Unified Communications Manager 12.5(26) - Cisco Unified Communications Manager 12.5(27) - Cisco Unified Communications Manager 12.5(28) - Cisco Unified Communications Manager 12.5(29) - Cisco Unified Communications Manager 12.5(30) - Cisco Unified Communications Manager 12.5(31) - Cisco Unified Communications Manager 12.5(32) - Cisco Unified Communications Manager 12.5(33) - Cisco Unified Communications Manager 12.5(34) - Cisco Unified Communications Manager 12.5(35) - Cisco Unified Communications Manager 12.5(36) - Cisco Unified Communications Manager 12.5(37) - Cisco Unified Communications Manager 12.5(38) - Cisco Unified Communications Manager 12.5(39) - Cisco Unified Communications Manager 12.5(40) - Cisco Unified Communications Manager 12.5(41) - Cisco Unified Communications Manager 12.5(42) - Cisco Unified Communications Manager 12.5(43) - Cisco Unified Communications Manager 12.5(44) - Cisco Unified Communications Manager 12.5(45) - Cisco Unified Communications Manager 12.5(46) - Cisco Unified Communications Manager 12.5(47) - Cisco Unified Communications Manager 12.5(48) - Cisco Unified Communications Manager 12.5(49) - Cisco Unified Communications Manager 12.5(50) - Cisco Unified Communications Manager 12.5(51) - Cisco Unified Communications Manager 12.5(52) - Cisco Unified Communications Manager 12.5(53) - Cisco Unified Communications Manager 12.5(54) - Cisco Unified Communications Manager 12.5(55) - Cisco Unified Communications Manager 12.5(56) - Cisco Unified Communications Manager 12.5(57) - Cisco Unified Communications Manager 12.5(58) - Cisco Unified Communications Manager 12.5(59) - Cisco Unified Communications Manager 12.5(60) - Cisco Unified Communications Manager 12.5(61) - Cisco Unified Communications Manager 12.5(62) - Cisco Unified Communications Manager 12.5(63) - Cisco Unified Communications Manager 12.5(64) - Cisco Unified Communications Manager 12.5(65) - Cisco Unified Communications Manager 12.5(66) - Cisco Unified Communications Manager 12.5(67) - Cisco Unified Communications Manager 12.5(68) - Cisco Unified Communications Manager 12.5(69) - Cisco Unified Communications Manager 12.5(70) - Cisco Unified Communications Manager 12.5(71) - Cisco Unified Communications Manager 12.5(72) - Cisco Unified Communications Manager 12.5(73) - Cisco Unified Communications Manager 12.5(74) - Cisco Unified Communications Manager 12.5(75) - Cisco Unified Communications Manager 12.5(76) - Cisco Unified Communications Manager 12.5(77) - Cisco Unified Communications Manager 12.5(78) - Cisco Unified Communications Manager 12.5(79) - Cisco Unified Communications Manager 12.5(80) - Cisco Unified Communications Manager 12.5(81) - Cisco Unified Communications Manager 12.5(82) - Cisco Unified Communications Manager 12.5(83) - Cisco Unified Communications Manager 12.5(84) - Cisco Unified Communications Manager 12.5(85) - Cisco Unified Communications Manager 12.5(86) - Cisco Unified Communications Manager 12.5(87) - Cisco Unified Communications Manager 12.5(88) - Cisco Unified Communications Manager 12.5(89) - Cisco Unified Communications Manager 12.5(90) - Cisc

Goal Reached Thanks to every supporter — we hit 100%!

Cisco CUCM Improper Access Control Vulnerability (CVE-2021-36644) Advisory