CVE:CVE-2021-1362
CNNVD:CNNVD-202104-445
Cisco Unity Connection（UC）和Cisco Unified Communications Manager（CUCM，Unified CM，CallManager）都是美国思科（Cisco）公司的产品。Cisco Unity Connection是一套语音留言平台。该平台可利用语音命令，以免提方式拨打电话或收听留言。Cisco Unified Communications Manager是一款统一通信系统中的呼叫处理组件。该组件提供了一种可扩展、可分布和高可用的企业IP电话呼叫处理解决方案。
Cisco Unified Communications Manager和Cisco Unity Connection 存在代码注入漏洞，攻击者可利用该漏洞可以通过SOAP API请求，来运行代码。
solution:Upgrade cisco prime_license_manager to a higher version than 11.5\(1\su9,and avoid the version [10.5\(2\),11.5\(1\)su9); Upgrade cisco unified_communications_manager to a higher version than 11.5\(1\su9,12.5\(1\su4,and avoid the version [10.5\(2\),11.5\(1\)su9),[12.0\(1\),12.5\(1\)su4); Upgrade cisco unified_communications_manager_im_&_presence_service to a higher version than 11.5\(1\su9,12.5\(1\su4,and avoid the version [10.5\(2\),11.5\(1\)su9),[12.0\(1\),12.5\(1\)su4); Upgrade cisco unity_connection to a higher version than 11.5\(1\su9,12.5\(1\su4,and avoid the version [10.5\(2\),11.5\(1\)su9),[12.0\(1\),12.5\(1\)su4)