CVE-2013-3397: Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Co...

Security readout for executives and security teams

This issue affects Cisco Unified Communications Manager's Unified Serviceability component. A remote attacker could abuse a logged-in user's browser session to submit serviceability actions without that user's intent. The source bundle does not provide affected versions, CVSS scoring, or a named fix, so urgency depends on whether CUCM serviceability interfaces are exposed to users or administrators. Exposure is most likely in organizations running Cisco Unified Communications Manager with the Unified Serviceability interface reachable by authenticated users, especially administrators. The bundle lists affected vendor and product fields as n/a, so version-level exposure cannot be confirmed from these sources alone. Treat this as a targeted administrative-interface risk, not a confirmed internet-wide emergency. Prioritize review for voice infrastructure because unauthorized serviceability actions could disrupt operations, but evidence is incomplete and no active exploitation is cited. Mitigation focus: Review Cisco's advisory for affected releases, fixed versions, and supported workarounds.; Restrict CUCM Unified Serviceability access to trusted administrative networks or VPN paths.; Prioritize remediation where CUCM administration is reachable from broad user networks..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.