CVE-2020-3130

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection (affected versions not specified)

Description A vulnerability in the web management interface of Cisco Unity Connection exists due to insufficient input validation, allowing an authenticated remote attacker to overwrite files on the underlying filesystem. The attacker could exploit this by sending a crafted HTTP request to the web management interface. A successful exploit could allow the attacker to overwrite files on the underlying filesystem of an affected system, requiring valid administrator credentials to access the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.