Skip to content
fr Sign in
5.1 Medium

CVE-2025-20112 A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…

Description

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to escape the restricted shell and gain root privileges on the underlying operating system of an affected device. To successfully exploit this vulnerability, an attacker would need administrative access to the ESXi hypervisor.

Affected products and versions

Product Affected versions Fixed in
Cisco Emergency Responder 15 15SU1a → 15 No fix stated
Cisco Emergency Responder 14 14SU1 → 14 No fix stated
Cisco Finesse Versions not published
Cisco Prime Collaboration Deployment 15 15SU1 → 15 No fix stated
Cisco Prime Collaboration Deployment 14 14SU1 → 14 No fix stated
Cisco SocialMiner Versions not published
Cisco Unified Communications Manager 15 15SU1a → 15 No fix stated
Cisco Unified Communications Manager 14 14SU1 → 14 No fix stated
Cisco Unified Communications Manager IM and Presence Service 15 15SU1 → 15 No fix stated
Show the 6 other branches
Product Affected versions Fixed in
Cisco Unified Communications Manager IM and Presence Service 14 14SU1 → 14 No fix stated
Cisco Unified Contact Center Express Versions not published
Cisco Unified Intelligence Center Versions not published
Cisco Unity Connection 15 15SU1 → 15 No fix stated
Cisco Unity Connection 14 14SU1 → 14 No fix stated
Cisco Virtualized Voice Browser 12.6 12.6.2-ET → 12.6.2-ET01-SSL No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Emergency Responder

The 17 CVEs of Cisco Emergency Responder →
CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.5 High CVE-2026-76479 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.8 High CVE-2026-76478 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 8.8 High CVE-2026-76476 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 8.8 High
Track this CVE