CVE-2017-6668: Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an...

Security readout for executives and security teams

CVE-2017-6668 is a Cisco Unified Communications Domain Manager web GUI SQL injection issue. An authenticated remote attacker could run arbitrary SQL queries, which may expose sensitive system data. The provided sources identify known affected release 8.1(7)ER1 but do not provide CVSS details or confirmed active exploitation. Exposure is most likely where CUCDM is deployed and its web GUI is reachable by authenticated users, especially release 8.1(7)ER1. The provided evidence does not define broader version ranges, internet exposure assumptions, or affected configurations beyond the named product and release. Treat this as a targeted confidentiality risk for organizations still running CUCDM. Priority depends on whether CUCDM exists in the environment, whether 8.1(7)ER1 is present, and how tightly GUI access is controlled. Absence of active exploitation evidence lowers urgency, but authenticated SQL injection in administrative infrastructure warrants prompt verification. Mitigation focus: Review Cisco advisory cisco-sa-20170607-cucm2 for fixed releases, workarounds, and support status.; Inventory CUCDM deployments and flag known affected release 8.1(7)ER1.; Until vendor guidance is applied, restrict CUCDM GUI access to trusted administrators and networks..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.