CVE-2013-3433: Cisco Unified Communications Manager

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02276.

Affected products

• Cisco Unified Communications Manager: version 7.1(2a) only; version 7.1(2a)su1 only; version 7.1(2b) only; version 7.1(2b)su1 only; version 7.1(3) only; version 7.1(3a) only; …

Published 2013-07-18. Last modified 2026-06-16.