CVE-2013-6689: Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file perm...

Security readout for executives and security teams

Cisco Unified Communications Manager 9.1(1) and earlier had a local file permission bypass. A local user could read, change, or create files they should not control. This matters most for legacy CUCM systems with shared, weakly governed, or broad local access. Exposure is limited to Cisco Unified Communications Manager 9.1(1) and earlier, especially systems where local user access exists or administrative access is shared. The provided affected-product metadata is incomplete, so confirm against Cisco inventory and vendor advisory details. Handle as a legacy-platform exposure requiring inventory and vendor-guided remediation. It is not shown as actively exploited, but arbitrary file modification on a communications platform can affect integrity and operational trust. Mitigation focus: Check Cisco’s security notice for supported fixed releases or official workarounds.; Upgrade or retire CUCM 9.1(1) and earlier if Cisco guidance recommends it.; Restrict local shell and administrative access to trusted personnel only..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.