CVE-2004-1760: Cisco Call Manager

High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days.

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Affected products

• Cisco Call Manager: version 1.0 only; version 2.0 only; version 3.0 only; version 3.1 only; version 3.1(2) only; version 3.1(3a) only; …
• Cisco Conference Connection: version 1.1(1) only; version 1.2 only
• Cisco Emergency Responder: version 1.1 only
• Cisco Internet Service Node: any version
• Cisco IP Call Center Express Enhanced: version 3.0 only
• Cisco IP Call Center Express Standard: version 3.0 only
• Cisco IP Interactive Voice Response: version 3.0 only
• Cisco Personal Assistant: version 1.3(1) only; version 1.3(2) only; version 1.3(3) only; version 1.3(4) only; version 1.4(1) only; version 1.4(2) only
• IBM Director Agent: version 2.2 only; version 3.11 only
• IBM Mcs-7815-1000: any version
• IBM Mcs-7815i-2.0: any version
• IBM Mcs-7835i-2.4: any version
• IBM Mcs-7835i-3.0: any version
• IBM x330: version 8654 only; version 8674 only
• IBM x340: any version
• IBM x342: any version
• IBM x345: any version

Published 2004-01-21. Last modified 2026-06-16.