CVE-2010-1571: Cisco Customer Response Solution

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.

Affected products

• Cisco Customer Response Solution: version 5.0 only; version 6.0 only; version 7.0 only
• Cisco Unified Contact Center Express: version 5.0 only; version 6.0 only; version 7.0 only
• Cisco Unified IP Interactive Voice Response: version 5.0 only; version 6.0 only; version 7.0 only

Published 2010-06-10. Last modified 2026-06-16.