CVE-2006-2166: Cisco Unity Express

Low severity, CVSS 2.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.

Affected products

• Cisco Unity Express: any version
• Cisco Unity Express Software: version 1.1.1 only; version 2.1.1 only; version 2.2.2 only

Published 2006-05-04. Last modified 2026-06-16.