Cisco Unity Express (CUE) Password Recovery

My adventures in Network land today brought me to a poor ignored AIM-CUE module running CUE 2.1. The customer was interested in us doing some upgrades to their CCME and CUE so I was poking around to get some basic info on the deployment. The only problem was the customer did not know the username/password. Luckily he knew the login/password for the router which makes access to CUE very simple.

  1. Connect to the Router and establish level 15 access
  2. You need to determine what the ServiceEngine number for CUE is. You do that by issuing a show ip interface brief. It should look similar to the following:
    Router#show ip interface brief
    Interface IP-Address OK? Method Status Protocol
    FastEthernet0/0 192.168.10.1 YES NVRAM up up
    FastEthernet0/1 unassigned YES NVRAM administratively down down
    Service-Engine1/0 192.168.10.4 YES TFTP up up
  3. Once you know the number type the following command service-module service-Engine 1/0 session. In this example CUE is installed at ServiceEngine1/0. Hit enter a few times and you should see a new command prompt.
  4. You now what to take a look at the users and see which accounts are there and which ones are administrators. To get a list of users type show users.
    cue>show users
    admin
    johndoe
    davidsmith

    To get a list of Administrators type show group detail groupname Administrators.

    cue>show group detail groupname Administrators
    Full Name: Administrators
    Description:
    Phone:
    Phone(E.164):
    Language: systemDefault(en_US)
    Owners:
    Members: admin johndoe
    Privileges: superuser ManagePrompts ManagePublicList ViewPrivateList
  5. If the username is “admin” you can reset the password by issuing the following command user admin password cisco.

As you can see it is very easy to do. If you are concerned about resetting a password you can also create a new administrator account by using the following commands:

cue>user newadmin create
cue>user newadmin group Administrators
cue>user newadmin password cisco

As you can see if you have level 15 access to the router you can session over to the CUE module and reset any password you like. I would highly recommend you make sure that the service-module command stays strictly restricted to level 15.



Leave a Reply