Skip to content
fr Sign in
9.9 Critical

CVE-2024-20253 A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…

Description

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Contact Center Enterprise Versions not published
Cisco Unity Connection 14 14SU1 → 14 No fix stated
Cisco Unified Communications Manager 14 14SU1 → 14 No fix stated
Cisco Unified Contact Center Express Versions not published
Cisco Unified Communications Manager IM and Presence Service 14 14SU1 → 14 No fix stated
Cisco Virtualized Voice Browser Versions not published
Cisco Packaged Contact Center Enterprise Versions not published
Cisco Unified Communications Manager / Cisco Unity Connection 11.0 11.0.1 → 11.0.5 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Contact Center Enterprise

The 11 CVEs of Cisco Unified Contact Center Enterprise →
CVE-2026-20314 A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise… 5.0 Medium CVE-2026-20109 Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged… 4.8 Medium CVE-2026-20055 Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged… 4.8 Medium CVE-2025-20377 A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote… 4.3 Medium
Track this CVE