CVE-2004-1760
Estado: ModificadaAlta (10)—
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.80%
- Percentil entre todas las CVEs puntuadas: 90
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (17)
Cisco — Call ManagerCisco — Conference ConnectionCisco — Emergency ResponderCisco — Internet Service NodeCisco — IP Call Center Express EnhancedCisco — IP Call Center Express StandardCisco — IP Interactive Voice ResponseCisco — Personal AssistantIBM — Director AgentIBM — Mcs-7815-1000IBM — Mcs-7815i-2.0IBM — Mcs-7835i-2.4IBM — Mcs-7835i-3.0IBM — X330IBM — X340IBM — X342IBM — X345
CWE
- CWE-287
Referencias
- http://secunia.com/advisories/10696
- http://www.ciac.org/ciac/bulletins/o-066.shtml
- http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
- http://www.kb.cert.org/vuls/id/602734
- http://www.osvdb.org/3692
- http://www.securityfocus.com/bid/9468
- http://www.securitytracker.com/id?1008814
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14900
- http://secunia.com/advisories/10696
- http://www.ciac.org/ciac/bulletins/o-066.shtml
- http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
- http://www.kb.cert.org/vuls/id/602734
- http://www.osvdb.org/3692
- http://www.securityfocus.com/bid/9468
- http://www.securitytracker.com/id?1008814
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14900
JSON original (NVD)
Mostrar
{
"id": "CVE-2004-1760",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2004-01-21T05:00:00.000",
"references": [
{
"url": "http://secunia.com/advisories/10696",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.ciac.org/ciac/bulletins/o-066.shtml",
"source": "cve@mitre.org"
},
{
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/602734",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/3692",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/9468",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1008814",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14900",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/10696",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ciac.org/ciac/bulletins/o-066.shtml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/602734",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/3692",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/9468",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1008814",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14900",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247."
}
],
"lastModified": "2026-06-16T22:08:20.853",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:emergency_responder:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10AFE8CE-EA67-4BC4-93BC-7D5D61D5A7C6"
},
{
"criteria": "cpe:2.3:a:cisco:ip_call_center_express_enhanced:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D08D0AA7-669D-4632-BB67-6994CB670466"
},
{
"criteria": "cpe:2.3:a:cisco:ip_call_center_express_standard:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6CBEC2E-2706-485A-A5A7-3BB25B5C4BC3"
},
{
"criteria": "cpe:2.3:a:cisco:ip_interactive_voice_response:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89E40B81-A536-45DE-BEFB-1EB6F030B647"
},
{
"criteria": "cpe:2.3:a:cisco:personal_assistant:1.3\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2B8308C-7C36-48E1-97BC-282908B9A38D"
},
{
"criteria": "cpe:2.3:a:cisco:personal_assistant:1.3\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29AF8C73-C10F-4873-941B-26C832D854EB"
},
{
"criteria": "cpe:2.3:a:cisco:personal_assistant:1.3\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CE1C413-0678-4E9A-AC7F-105538D3C56E"
},
{
"criteria": "cpe:2.3:a:cisco:personal_assistant:1.3\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4ADC051-C35B-4C68-B751-B8A2434A6E79"
},
{
"criteria": "cpe:2.3:a:cisco:personal_assistant:1.4\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "131ABD48-89ED-45B9-865B-20AF3631BA6C"
},
{
"criteria": "cpe:2.3:a:cisco:personal_assistant:1.4\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BC18EEF-1DA5-402A-9C22-BCF287F2D501"
},
{
"criteria": "cpe:2.3:a:ibm:director_agent:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E033E9D-604D-4829-B95F-E3D095419BB2"
},
{
"criteria": "cpe:2.3:a:ibm:director_agent:3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F501C60E-4B48-4F10-84B5-F29FB5BAEF74"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14BF1392-C6E2-4946-9B9E-A64BFE7E8057"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA117831-013A-4B62-90EA-9F87D0DBACF3"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C08E2D6A-1B4C-4BDA-8FF7-8D61A393460E"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF7E0B10-11E0-44B7-A450-AA5AB058C6C5"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:3.1\\(2\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9C25529-9048-46E8-8A59-61CAD59C2C40"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:3.1\\(3a\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70ADFE52-9C89-4C29-AC74-7F510326F810"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9306CD67-C43D-46F7-B76B-1FA0ACC6135E"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:3.3\\(3\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3D9BE35-E2AA-42A4-BECB-1BD33F2D9F2F"
},
{
"criteria": "cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"
},
{
"criteria": "cpe:2.3:h:cisco:internet_service_node:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02122172-DBC4-445A-9BB6-E33B6F5B9F77"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:conference_connection:1.1\\(1\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35D53AA4-4E6D-4586-A84A-634C68C0C967"
},
{
"criteria": "cpe:2.3:o:cisco:conference_connection:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38CC94AA-9702-4A7E-82C5-DE06FB7D6631"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ibm:mcs-7815-1000:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1F0C52A-A68B-4E9B-934A-D33E8B3123E5"
},
{
"criteria": "cpe:2.3:h:ibm:mcs-7815i-2.0:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "672D30B8-47CE-46D0-97CB-9320B4B4FC2B"
},
{
"criteria": "cpe:2.3:h:ibm:mcs-7835i-2.4:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E40E5D2-DEF9-4A28-8092-AC0B2EC0399F"
},
{
"criteria": "cpe:2.3:h:ibm:mcs-7835i-3.0:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1C555A8-5208-4FE2-822B-11AFB5E8B9CF"
},
{
"criteria": "cpe:2.3:h:ibm:x330:8654:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18E307F0-1987-402C-AF67-884DA8872CC9"
},
{
"criteria": "cpe:2.3:h:ibm:x330:8674:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E4EC292-CC2D-4B6F-94A6-59185406C182"
},
{
"criteria": "cpe:2.3:h:ibm:x340:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B72E43B-99E9-435D-87EA-1B196A63DA45"
},
{
"criteria": "cpe:2.3:h:ibm:x342:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "853911A3-E740-4F80-8464-7A23A59B2474"
},
{
"criteria": "cpe:2.3:h:ibm:x345:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C00D0835-3880-4A3A-8559-C79EB4ADB25D"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}