Aller au contenu
en Se connecter
5.1 Moyenne

CVE-2025-20112 A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…

Description

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to escape the restricted shell and gain root privileges on the underlying operating system of an affected device. To successfully exploit this vulnerability, an attacker would need administrative access to the ESXi hypervisor.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Emergency Responder 15 15SU1a → 15 Pas de correctif indiqué
Cisco Emergency Responder 14 14SU1 → 14 Pas de correctif indiqué
Cisco Finesse Versions non publiées
Cisco Prime Collaboration Deployment 15 15SU1 → 15 Pas de correctif indiqué
Cisco Prime Collaboration Deployment 14 14SU1 → 14 Pas de correctif indiqué
Cisco SocialMiner Versions non publiées
Cisco Unified Communications Manager 15 15SU1a → 15 Pas de correctif indiqué
Cisco Unified Communications Manager 14 14SU1 → 14 Pas de correctif indiqué
Cisco Unified Communications Manager IM and Presence Service 15 15SU1 → 15 Pas de correctif indiqué
Afficher les 6 autres branches
Produit Versions touchées Corrigé en
Cisco Unified Communications Manager IM and Presence Service 14 14SU1 → 14 Pas de correctif indiqué
Cisco Unified Contact Center Express Versions non publiées
Cisco Unified Intelligence Center Versions non publiées
Cisco Unity Connection 15 15SU1 → 15 Pas de correctif indiqué
Cisco Unity Connection 14 14SU1 → 14 Pas de correctif indiqué
Cisco Virtualized Voice Browser 12.6 12.6.2-ET → 12.6.2-ET01-SSL Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Emergency Responder

Les 17 CVE de Cisco Emergency Responder →
CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.5 Élevée CVE-2026-76479 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.8 Élevée CVE-2026-76478 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 8.8 Élevée CVE-2026-76476 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 8.8 Élevée
Suivre cette CVE