CVE-2002-1190: Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain a...

Security readout for executives and security teams

CVE-2002-1190 describes Cisco Unity 2.x and 3.x systems containing well-known default user accounts. If those accounts remain usable, a remote attacker could gain access and place arbitrary calls, creating toll-fraud and service-abuse risk. Exposure is most likely in legacy Cisco Unity 2.x or 3.x deployments where default or example accounts were never removed, disabled, renamed, or secured. Public source metadata is incomplete, so confirm against local asset inventory and Cisco guidance. Prioritize investigation if Cisco Unity 2.x or 3.x remains in use. The main business risk is unauthorized access leading to toll fraud and operational abuse, but urgency depends on whether default accounts still exist. Mitigation focus: Check Cisco guidance for supported remediation and configuration recommendations.; Disable, remove, or secure any default or example Unity accounts.; Restrict remote access to Unity administration and user-facing services..

Prepared

Jul 1, 2026, 06:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.