CVE-2004-1760

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Published: Jan 21, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-1760
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-287

OWASP TOP 10:

A2 - Broken Authentication

Affected Software
References

Software	From	Fixed in
cisco / personal_assistant	1.3(2)	1.3(2).x
cisco / ip_interactive_voice_response	3.0	3.0.x
cisco / personal_assistant	1.3(4)	1.3(4).x
cisco / ip_call_center_express_standard	3.0	3.0.x
cisco / call_manager	3.0	3.0.x
cisco / call_manager	3.1(3a)	3.1(3a).x
cisco / call_manager	1.0	1.0.x
cisco / personal_assistant	1.3(3)	1.3(3).x
cisco / call_manager	3.2	3.2.x
cisco / call_manager	3.1(2)	3.1(2).x
cisco / personal_assistant	1.4(2)	1.4(2).x
cisco / call_manager	3.3	3.3.x
cisco / call_manager	2.0	2.0.x
cisco / internet_service_node	-	-
cisco / personal_assistant	1.4(1)	1.4(1).x
cisco / call_manager	3.1	3.1.x
ibm / director_agent	3.11	3.11.x
ibm / director_agent	2.2	2.2.x
cisco / ip_call_center_express_enhanced	3.0	3.0.x
cisco / call_manager	4.0	4.0.x
cisco / call_manager	3.3(3)	3.3(3).x
cisco / emergency_responder	1.1	1.1.x
cisco / personal_assistant	1.3(1)	1.3(1).x
cisco / conference_connection	1.2	1.2.x
cisco / conference_connection	1.1(1)	1.1(1).x
ibm / x340	-	-
ibm / mcs-7835i-3.0	-	-
ibm / mcs-7835i-2.4	-	-
ibm / mcs-7815i-2.0	-	-
ibm / x345	-	-
ibm / x330	8654	8654.x
ibm / mcs-7815-1000	-	-
ibm / x330	8674	8674.x
ibm / x342	-	-

Vulnerability Database

289,599

CVE-2004-1760