CVE:CVE-2010-1571
CNNVD:CNNVD-201006-120
Cisco UCCX是集成的联络中心解决方案。
Cisco UCCX产品的bootstrap服务中存在目录遍历漏洞。可通过向TCP 6295端口的bootstrap发送消息来触发这个漏洞，导致读访问系统上的任意文件。所有的部署模式都可能受影响，如ICD、ICM和IP-IVR，但仅在配置中添加了第二节点的情况下才受影响。
solution:Upgrade cisco unified_contact_center_express to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade cisco customer_response_solution to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade cisco unified_ip_interactive_voice_response to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0