← CVE Intelligence

CVE-2024-20253

Cisco / Cisco Unified Contact Center Enterprise PUBLISHED

Description (CNA)

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device.

Affected (CNA)

Vendor / productVersions
Cisco / Cisco Unified Contact Center Enterpriseaffected N/A
Cisco / Cisco Unity Connectionaffected 12.0(1)SU1; affected 12.0(1)SU2; affected 12.0(1)SU3; affected 12.0(1)SU4; affected 12.0(1)SU5; affected 12.5(1); affected 12.5(1)SU1; affected 12.5(1)SU2; affected 12.5(1)SU3; affected 12.5(1)SU4; affected 12.5(1)SU5; affected 12.5(1)SU6; affected 12.5(1)SU7; affected 14; affected 14SU1; affected 14SU2
Cisco / Cisco Unified Communications Manageraffected 12.0(1)SU1; affected 12.0(1)SU2; affected 12.0(1)SU3; affected 12.0(1)SU4; affected 12.0(1)SU5; affected 12.5(1); affected 12.5(1)SU1; affected 12.5(1)SU2; affected 12.5(1)SU3; affected 12.5(1)SU4; affected 12.5(1)SU5; affected 12.5(1)SU6; affected 12.5(1)SU7; affected 12.5(1)SU7a; affected 14; affected 14SU1; affected 14SU2
Cisco / Cisco Unified Contact Center Expressaffected 8.5(1); affected 9.0(2)SU3ES04; affected 10.0(1)SU1; affected 10.0(1)SU1ES04; affected 10.5(1); affected 10.5(1)SU1; affected 10.5(1)SU1ES10; affected 10.6(1); affected 10.6(1)SU1; affected 10.6(1)SU3; affected 10.6(1)SU2; affected 10.6(1)SU3ES03; affected 10.6(1)SU2ES04; affected 10.6(1)SU3ES02; affected 10.6(1)SU3ES01; affected 11.0(1)SU1; affected 11.0(1)SU1ES03; affected 11.0(1)SU1ES02; affected 11.5(1)SU1; affected 11.5(1)SU1ES02; affected 11.5(1)SU1ES01; affected 11.5(1)SU1ES03; affected 11.5(1)ES01; affected 12.0(1); affected 12.0(1)ES01; affected 12.0(1)ES03; affected 12.0(1)ES04; affected 12.0(1)ES02; affected 12.5(1); affected 12.5(1)SU1; affected 12.5(1)SU2; affected 12.5(1)SU3; affected 12.5(1)_SU01_ES03; affected 12.5(1)ES03; affected 12.5(1)_SU01_ES01; affected 12.5(1)_SU02_ES02; affected 12.5(1)_SU01_ES02; affected 12.5(1)_SU02_ES03; affected 12.5(1)ES01; affected 12.5(1)_SU02_ES01; affected 12.5(1)ES02; affected 12.5(1)_SU03_ES01; affected 12.5(1)_SU02_ES04; affected 12.5(1)_SU03_ES02; affected 12.5(1)_SU03_ES03; affected 12.5(1)_SU03_ES04; affected 11.6(1); affected 11.6(2); affected 11.6(1)ES01; affected 11.6(2)ES06; affected 11.6(1)ES02; affected 11.6(2)ES01; affected 11.6(2)ES03; affected 11.6(2)ES07; affected 11.6(2)ES08; affected 11.6(2)ES02; affected 11.6(2)ES05; affected 11.6(2)ES04
Cisco / Cisco Unified Communications Manager IM and Presence Serviceaffected 10.5(1); affected 10.5(2); affected 10.5(2a); affected 10.5(2b); affected 10.5(2)SU3; affected 10.5(2)SU2a; affected 10.5(2)SU4a; affected 10.5(2)SU4; affected 10.5(1)SU3; affected 10.5(1)SU1; affected 10.5(2)SU1; affected 10.5(2)SU2; affected 10.5(1)SU2; affected 11.5(1); affected 11.5(1)SU1; affected 11.5(1)SU2; affected 11.5(1)SU3; affected 11.5(1)SU3a; affected 11.5(1)SU4; affected 11.5(1)SU5; affected 11.5(1)SU5a; affected 11.5(1)SU6; affected 11.5(1)SU7; affected 11.5(1)SU8; affected 11.5(1)SU9; affected 11.5(1)SU10; affected 11.5(1)SU11; affected 11.0(1); affected 11.0(1)SU1; affected 12.5(1); affected 12.5(1)SU1; affected 12.5(1)SU2; affected 12.5(1)SU3; affected 12.5(1)SU4; affected 12.5(1)SU5; affected 12.5(1)SU6; affected 12.5(1)SU7; affected 14; affected 14SU1; affected 14SU2; affected 14SU2a; affected 10.0(1); affected 10.0(1)SU1; affected 10.0(1)SU2
Cisco / Cisco Virtualized Voice Browseraffected 11.0(1); affected 11.5(1); affected 11.5(1)ES29; affected 11.5(1)ES32; affected 11.5(1)_ES43; affected 11.5(1)_ES54; affected 11.5(1)_ES27; affected 11.5(1)ES36; affected 11.5(1)_ES32; affected 11.5(1)_ES29; affected 11.5(1)_ES36; affected 11.5(1)ES43; affected 11.5(1)_ES53; affected 11.5(1)ES27; affected 11.6(1); affected 11.6(1)_ES82; affected 11.6(1)_ES22; affected 11.6(1)_ES81; affected 11.6(1)_ES87; affected 11.6(1)_ES84; affected 11.6(1)_ES85; affected 11.6(1)_ES83; affected 11.6(1)_ES80; affected 11.6(1)_ES86; affected 11.6(1)_ES88; affected 12.5(1)_ES04; affected 12.5(1)_ES07; affected 12.5(1)_ES02; affected 12.5(1); affected 12.5(1)_ES08; affected 12.5(1)_ES03; affected 12.5(1)_ES06; affected 12.5(1)_ES09; affected 12.5(1)_ES14; affected 12.5(1)SU; affected 12.5(1)_ES15; affected 12.5(1)_SU; affected 12.5(1)_SU_ES01; affected 12.5(1)_ES11; affected 12.5(1)_ES12; affected 12.5(2)_ET; affected 12.5(1)_SU_ES02; affected 12.5(1)_ES10; affected 12.0(1); affected 12.0(1)_ES02; affected 12.0(1)_ES01; affected 12.0(1)_ES06; affected 12.0(1)_ES07; affected 12.0(1)_ES05; affected 12.0(1)_ES04; affected 12.0(1)_ES03; affected 12.0(1)_ES08; affected 12.6(1); affected 12.6(1)_ES04; affected 12.6(1)_ES03; affected 12.6(1)_ES09; affected 12.6(1)_ES06; affected 12.6(1)_ES08; affected 12.6(1)_ES05; affected 12.6(2)_ES03; affected 12.6(1)_ES02; affected 12.6(1)_ES01; affected 12.6(2); affected 12.6(2)_ET01; affected 12.6(2)_ES02; affected 12.6(2)_ES01; affected 12.6(1)_ES07
Cisco / Cisco Packaged Contact Center Enterpriseaffected 10.5(1); affected 10.5(2); affected 10.5(1)_ES7; affected 10.5(2)_ES8; affected 11.0(1); affected 11.0(2); affected 11.5(1); affected 11.6(1); affected 11.6(2); affected 12.0(1); affected 12.5(1); affected 12.5(2); affected 12.6(1); affected 12.6(2)
Cisco / Cisco Unified Communications Manager / Cisco Unity Connectionaffected 10.5(2)SU10; affected 10.5(1); affected 10.5(1)SU1; affected 10.5(1)SU1a; affected 10.5(2); affected 10.5(2)SU1; affected 10.5(2)SU2; affected 10.5(2)SU3; affected 10.5(2)SU4; affected 10.5(2)SU5; affected 10.5(2)SU6; affected 10.5(2)SU7; affected 10.5(2)SU8; affected 10.5(2)SU9; affected 10.5(2)SU2a; affected 10.5(2)SU3a; affected 10.5(2)SU4a; affected 10.5(2)SU6a; affected 11.0(1); affected 11.0(1a); affected 11.0(1a)SU1; affected 11.0(1a)SU2; affected 11.0(1a)SU3; affected 11.0(1a)SU3a; affected 11.0(1a)SU4; affected 11.0.1; affected 11.0.2; affected 11.0.5; affected 11.5(1); affected 11.5(1)SU1; affected 11.5(1)SU2; affected 11.5(1)SU3; affected 11.5(1)SU3a; affected 11.5(1)SU3b; affected 11.5(1)SU4; affected 11.5(1)SU5; affected 11.5(1)SU6; affected 11.5(1)SU7; affected 11.5(1)SU8; affected 11.5(1)SU9; affected 11.5(1)SU10; affected 11.5(1)SU11; affected 10.0(1)SU2; affected 10.0(1); affected 10.0(1)SU1

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.