CVE-2006-2166
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2)...
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
- Record
CVE-2006-2166- CVSS 2.0
- 2.1 Low
AV:N/AC:H/Au:S/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
- Record
CVE-2006-2166- Updated
- 2026-11-02
EUVDEUVD-2006-2167 No score
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
- Record
EUVD-2006-2167- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6g6q-2h84-3ph5 No score
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2)...
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
- Record
GHSA-6g6q-2h84-3ph5- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2166 is a low vulnerability (CVSS 2.1) in Cisco Unity Express, published May 4, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.65%, the 76th percentile. No source names a fixed version.
References
secunia.com/advisories/19881
vupen.com/english/advisories/2006/1613
osvdb.org/25165
exchange.xforce.ibmcloud.com/vulnerabilities/26165
securitytracker.com/id?1016015
cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml
securityfocus.com/bid/17775
nvd.nist.gov/vuln/detail/CVE-2006-2166
github.com/advisories/GHSA-6g6q-2h84-3ph5