← Vulnerability feed

Vulnerability record · CVE-2002-1189 · published 11 October 2002

CVE-2002-1189: Cisco unity server vulnerability

Cisco · Unity Server

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.

4.6 CVSS 2.0 Medium EPSS 0.35% · top 73.4%
4.6CVSS 2.0 base score
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml PatchVendor Advisory
http://www.iss.net/security_center/static/10282.php Vendor Advisory
http://www.securityfocus.com/bid/5896
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml PatchVendor Advisory
http://www.iss.net/security_center/static/10282.php Vendor Advisory
http://www.securityfocus.com/bid/5896

Track CVE-2002-1189 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-1322Cisco unity server vulnerabilityCisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers…EPSS 2.5%7.5CVE-2002-1190Cisco unity server vulnerabilityCisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.EPSS 1.6%5.0CVE-2005-0356TCP PAWS timestamp handling allows remote connection lossMultiple TCP implementations that enable the timestamps option with Protection Against Wrapped Sequence Numbers (PAWS) can be forced to discard valid…EPSS 83%analysed

Source: NIST National Vulnerability Database (record CVE-2002-1189), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.