CVE-2012-0366: Cisco Unity Connection

High severity, CVSS 9.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.

Affected products

• Cisco Unity Connection: up to and including 7.1\(3b\)su1; version 1.1 only; version 1.1(1) only; version 1.1(1)_es1 only; version 1.1(1)_es12 only; version 1.1(1)_sr1 only; …

Published 2012-03-01. Last modified 2026-06-16.