{"uuid": "193d261b-8cd1-41fe-b169-46fa91d3be4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-3300", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/voip/cisco_cucdm_speed_dials.rb", "content": "{\"actions\": [{\"description\": \"Adding a speeddial for the MAC address\", \"name\": \"Add\"}, {\"description\": \"Deleting a speeddial for the MAC address\", \"name\": \"Delete\"}, {\"description\": \"Getting the speeddials for the MAC address\", \"name\": \"List\"}, {\"description\": \"Modifying a speeddial for the MAC address\", \"name\": \"Modify\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"fozavci\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager\\n          (CDM), before version 10, doesn't implement access control properly, which allows remote\\n          attackers to modify user information. This module exploits the vulnerability to make\\n          unauthorized speed dial entity manipulations.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/voip/cisco_cucdm_speed_dials\", \"is_install_path\": true, \"mod_time\": \"2025-05-07 00:47:05 +0000\", \"name\": \"Viproy CUCDM IP Phone XML Services - Speed Dial Attack Tool\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/voip/cisco_cucdm_speed_dials.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"voip/cisco_cucdm_speed_dials\", \"references\": [\"CVE-2014-3300\", \"BID-68331\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:15.723146Z"}