Aller au contenu
en Se connecter
6.0 Moyenne

CVE-2025-20278 A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local…

Description

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Finesse Versions non publiées
Cisco SocialMiner Versions non publiées
Cisco Unified Communications Manager 15 15SU1a → 15 Pas de correctif indiqué
Cisco Unified Communications Manager 14 14SU1 → 14 Pas de correctif indiqué
Cisco Unified Communications Manager IM and Presence Service 15 15SU1 → 15 Pas de correctif indiqué
Cisco Unified Communications Manager IM and Presence Service 14 14SU1 → 14 Pas de correctif indiqué
Cisco Unified Contact Center Express Versions non publiées
Cisco Unified Intelligence Center Versions non publiées
Cisco Unity Connection 15 15SU1 → 15 Pas de correctif indiqué
Afficher les 2 autres branches
Produit Versions touchées Corrigé en
Cisco Unity Connection 14 14SU1 → 14 Pas de correctif indiqué
Cisco Virtualized Voice Browser 12.6 12.6.2-ET → 12.6.2-ET01-SSL Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Finesse

Les 9 CVE de Cisco Finesse →
CVE-2026-20362 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker… 7.2 Élevée CVE-2026-20175 A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote… 6.1 Moyenne CVE-2025-20112 A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an… 5.1 Moyenne CVE-2024-20405 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker… 4.8 Moyenne
Suivre cette CVE