Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-12214 Details

Description

A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to the OAMP and sending a crafted HTTP request. A successful exploit could allow the attacker to gain administrator privileges. The attacker must successfully authenticate to the system to exploit this vulnerability. This vulnerability affects Cisco Unified Customer Voice Portal (CVP) running software release 10.5, 11.0, or 11.5. Cisco Bug IDs: CSCve92752.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cvp CVEVendor Advisory
http://www.securityfocus.com/bid/100931 CVEThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039411 CVEThird Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cvp [email protected]Vendor Advisory
http://www.securityfocus.com/bid/100931 [email protected]Third Party AdvisoryVDB Entry

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-20Improper Input Validation[email protected]
CWE-264Permissions, Privileges, and Access Controls[email protected]

Affected Products

ProductVersions
cisco unified customer voice portal
10.5
11.0
11.5

CPE

  • cpe:2.3:a:cisco:unified_customer_voice_portal:10.5:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_customer_voice_portal:11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_customer_voice_portal:11.5:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

9 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-12214
NVD Published Date:
Sep 21, 2017
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2017-12214 Details - Not Deferred