Cisco Unity Express (CUE) Password Recovery
My adventures in Network land today brought me to a poor ignored AIM-CUE module running CUE 2.1. The customer was interested in us doing some upgrades to their CCME and CUE so I was poking around to get some basic info on the deployment. The only problem was the customer did not know the username/password. Luckily he knew the login/password for the router which makes access to CUE very simple.
- Connect to the Router and establish level 15 access
- You need to determine what the ServiceEngine number for CUE is. You do that by issuing a show ip interface brief. It should look similar to the following:
Router#show ip interface brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 192.168.10.1 YES NVRAM up up
FastEthernet0/1 unassigned YES NVRAM administratively down down
Service-Engine1/0 192.168.10.4 YES TFTP up up - Once you know the number type the following command service-module service-Engine 1/0 session. In this example CUE is installed at ServiceEngine1/0. Hit enter a few times and you should see a new command prompt.
- You now what to take a look at the users and see which accounts are there and which ones are administrators. To get a list of users type show users.
cue>show users
admin
johndoe
davidsmithTo get a list of Administrators type show group detail groupname Administrators.
cue>show group detail groupname Administrators
Full Name: Administrators
Description:
Phone:
Phone(E.164):
Language: systemDefault(en_US)
Owners:
Members: admin johndoe
Privileges: superuser ManagePrompts ManagePublicList ViewPrivateList - If the username is “admin” you can reset the password by issuing the following command user admin password cisco.
As you can see it is very easy to do. If you are concerned about resetting a password you can also create a new administrator account by using the following commands:
cue>user newadmin group Administrators
cue>user newadmin password cisco
As you can see if you have level 15 access to the router you can session over to the CUE module and reset any password you like. I would highly recommend you make sure that the service-module command stays strictly restricted to level 15.