← Vulnerability feed

Vulnerability record · CVE-2002-1190 · published 28 October 2002

CVE-2002-1190: Cisco unity server vulnerability

Cisco · Unity Server

Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.

7.5 CVSS 2.0 High EPSS 1.6% · top 25.0%
7.5CVSS 2.0 base score
1.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml PatchVendor Advisory
http://www.iss.net/security_center/static/10282.php Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44545
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml PatchVendor Advisory
http://www.iss.net/security_center/static/10282.php Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44545

Track CVE-2002-1190 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-1322Cisco unity server vulnerabilityCisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers…EPSS 2.5%5.0CVE-2005-0356TCP PAWS timestamp handling allows remote connection lossMultiple TCP implementations that enable the timestamps option with Protection Against Wrapped Sequence Numbers (PAWS) can be forced to discard valid…EPSS 83%analysed4.6CVE-2002-1189Cisco unity server vulnerabilityThe default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could al…EPSS 0.35%

Source: NIST National Vulnerability Database (record CVE-2002-1190), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.