CVE-2024-20253

Summary

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Unified Contact Center EnterpriseN/Aaffected
CiscoCisco Unity Connection12.0(1)SU1affected
CiscoCisco Unity Connection12.0(1)SU2affected
CiscoCisco Unity Connection12.0(1)SU3affected
CiscoCisco Unity Connection12.0(1)SU4affected
CiscoCisco Unity Connection12.0(1)SU5affected
CiscoCisco Unity Connection12.5(1)affected
CiscoCisco Unity Connection12.5(1)SU1affected
CiscoCisco Unity Connection12.5(1)SU2affected
CiscoCisco Unity Connection12.5(1)SU3affected
CiscoCisco Unity Connection12.5(1)SU4affected
CiscoCisco Unity Connection12.5(1)SU5affected
CiscoCisco Unity Connection12.5(1)SU6affected
CiscoCisco Unity Connection12.5(1)SU7affected
CiscoCisco Unity Connection14affected
CiscoCisco Unity Connection14SU1affected
CiscoCisco Unity Connection14SU2affected
CiscoCisco Unified Communications Manager12.0(1)SU1affected
CiscoCisco Unified Communications Manager12.0(1)SU2affected
CiscoCisco Unified Communications Manager12.0(1)SU3affected
CiscoCisco Unified Communications Manager12.0(1)SU4affected
CiscoCisco Unified Communications Manager12.0(1)SU5affected
CiscoCisco Unified Communications Manager12.5(1)affected
CiscoCisco Unified Communications Manager12.5(1)SU1affected
CiscoCisco Unified Communications Manager12.5(1)SU2affected
CiscoCisco Unified Communications Manager12.5(1)SU3affected
CiscoCisco Unified Communications Manager12.5(1)SU4affected
CiscoCisco Unified Communications Manager12.5(1)SU5affected
CiscoCisco Unified Communications Manager12.5(1)SU6affected
CiscoCisco Unified Communications Manager12.5(1)SU7affected
CiscoCisco Unified Communications Manager12.5(1)SU7aaffected
CiscoCisco Unified Communications Manager14affected
CiscoCisco Unified Communications Manager14SU1affected
CiscoCisco Unified Communications Manager14SU2affected
CiscoCisco Unified Contact Center Express8.5(1)affected
CiscoCisco Unified Contact Center Express9.0(2)SU3ES04affected
CiscoCisco Unified Contact Center Express10.0(1)SU1affected
CiscoCisco Unified Contact Center Express10.0(1)SU1ES04affected
CiscoCisco Unified Contact Center Express10.5(1)affected
CiscoCisco Unified Contact Center Express10.5(1)SU1affected
CiscoCisco Unified Contact Center Express10.5(1)SU1ES10affected
CiscoCisco Unified Contact Center Express10.6(1)affected
CiscoCisco Unified Contact Center Express10.6(1)SU1affected
CiscoCisco Unified Contact Center Express10.6(1)SU3affected
CiscoCisco Unified Contact Center Express10.6(1)SU2affected
CiscoCisco Unified Contact Center Express10.6(1)SU3ES03affected
CiscoCisco Unified Contact Center Express10.6(1)SU2ES04affected
CiscoCisco Unified Contact Center Express10.6(1)SU3ES02affected
CiscoCisco Unified Contact Center Express10.6(1)SU3ES01affected
CiscoCisco Unified Contact Center Express11.0(1)SU1affected
CiscoCisco Unified Contact Center Express11.0(1)SU1ES03affected
CiscoCisco Unified Contact Center Express11.0(1)SU1ES02affected
CiscoCisco Unified Contact Center Express11.5(1)SU1affected
CiscoCisco Unified Contact Center Express11.5(1)SU1ES02affected
CiscoCisco Unified Contact Center Express11.5(1)SU1ES01affected
CiscoCisco Unified Contact Center Express11.5(1)SU1ES03affected
CiscoCisco Unified Contact Center Express11.5(1)ES01affected
CiscoCisco Unified Contact Center Express12.0(1)affected
CiscoCisco Unified Contact Center Express12.0(1)ES01affected
CiscoCisco Unified Contact Center Express12.0(1)ES03affected
CiscoCisco Unified Contact Center Express12.0(1)ES04affected
CiscoCisco Unified Contact Center Express12.0(1)ES02affected
CiscoCisco Unified Contact Center Express12.5(1)affected
CiscoCisco Unified Contact Center Express12.5(1)SU1affected
CiscoCisco Unified Contact Center Express12.5(1)SU2affected
CiscoCisco Unified Contact Center Express12.5(1)SU3affected
CiscoCisco Unified Contact Center Express12.5(1)_SU01_ES03affected
CiscoCisco Unified Contact Center Express12.5(1)ES03affected
CiscoCisco Unified Contact Center Express12.5(1)_SU01_ES01affected
CiscoCisco Unified Contact Center Express12.5(1)_SU02_ES02affected
CiscoCisco Unified Contact Center Express12.5(1)_SU01_ES02affected
CiscoCisco Unified Contact Center Express12.5(1)_SU02_ES03affected
CiscoCisco Unified Contact Center Express12.5(1)ES01affected
CiscoCisco Unified Contact Center Express12.5(1)_SU02_ES01affected
CiscoCisco Unified Contact Center Express12.5(1)ES02affected
CiscoCisco Unified Contact Center Express12.5(1)_SU03_ES01affected
CiscoCisco Unified Contact Center Express12.5(1)_SU02_ES04affected
CiscoCisco Unified Contact Center Express12.5(1)_SU03_ES02affected
CiscoCisco Unified Contact Center Express12.5(1)_SU03_ES03affected
CiscoCisco Unified Contact Center Express12.5(1)_SU03_ES04affected
CiscoCisco Unified Contact Center Express11.6(1)affected
CiscoCisco Unified Contact Center Express11.6(2)affected
CiscoCisco Unified Contact Center Express11.6(1)ES01affected
CiscoCisco Unified Contact Center Express11.6(2)ES06affected
CiscoCisco Unified Contact Center Express11.6(1)ES02affected
CiscoCisco Unified Contact Center Express11.6(2)ES01affected
CiscoCisco Unified Contact Center Express11.6(2)ES03affected
CiscoCisco Unified Contact Center Express11.6(2)ES07affected
CiscoCisco Unified Contact Center Express11.6(2)ES08affected
CiscoCisco Unified Contact Center Express11.6(2)ES02affected
CiscoCisco Unified Contact Center Express11.6(2)ES05affected
CiscoCisco Unified Contact Center Express11.6(2)ES04affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(1)affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2)affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2a)affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2b)affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2)SU3affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2)SU2aaffected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2)SU4aaffected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2)SU4affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(1)SU3affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(1)SU1affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2)SU1affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(2)SU2affected
CiscoCisco Unified Communications Manager IM and Presence Service10.5(1)SU2affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU1affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU2affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU3affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU3aaffected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU4affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU5affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU5aaffected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU6affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU7affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU8affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU9affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU10affected
CiscoCisco Unified Communications Manager IM and Presence Service11.5(1)SU11affected
CiscoCisco Unified Communications Manager IM and Presence Service11.0(1)affected
CiscoCisco Unified Communications Manager IM and Presence Service11.0(1)SU1affected
CiscoCisco Unified Communications Manager IM and Presence Service12.5(1)affected
CiscoCisco Unified Communications Manager IM and Presence Service12.5(1)SU1affected
CiscoCisco Unified Communications Manager IM and Presence Service12.5(1)SU2affected
CiscoCisco Unified Communications Manager IM and Presence Service12.5(1)SU3affected
CiscoCisco Unified Communications Manager IM and Presence Service12.5(1)SU4affected
CiscoCisco Unified Communications Manager IM and Presence Service12.5(1)SU5affected
CiscoCisco Unified Communications Manager IM and Presence Service12.5(1)SU6affected
CiscoCisco Unified Communications Manager IM and Presence Service12.5(1)SU7affected
CiscoCisco Unified Communications Manager IM and Presence Service14affected
CiscoCisco Unified Communications Manager IM and Presence Service14SU1affected
CiscoCisco Unified Communications Manager IM and Presence Service14SU2affected
CiscoCisco Unified Communications Manager IM and Presence Service14SU2aaffected
CiscoCisco Unified Communications Manager IM and Presence Service10.0(1)affected
CiscoCisco Unified Communications Manager IM and Presence Service10.0(1)SU1affected
CiscoCisco Unified Communications Manager IM and Presence Service10.0(1)SU2affected
CiscoCisco Virtualized Voice Browser11.0(1)affected
CiscoCisco Virtualized Voice Browser11.5(1)affected
CiscoCisco Virtualized Voice Browser11.5(1)ES29affected
CiscoCisco Virtualized Voice Browser11.5(1)ES32affected
CiscoCisco Virtualized Voice Browser11.5(1)_ES43affected
CiscoCisco Virtualized Voice Browser11.5(1)_ES54affected
CiscoCisco Virtualized Voice Browser11.5(1)_ES27affected
CiscoCisco Virtualized Voice Browser11.5(1)ES36affected
CiscoCisco Virtualized Voice Browser11.5(1)_ES32affected
CiscoCisco Virtualized Voice Browser11.5(1)_ES29affected
CiscoCisco Virtualized Voice Browser11.5(1)_ES36affected
CiscoCisco Virtualized Voice Browser11.5(1)ES43affected
CiscoCisco Virtualized Voice Browser11.5(1)_ES53affected
CiscoCisco Virtualized Voice Browser11.5(1)ES27affected
CiscoCisco Virtualized Voice Browser11.6(1)affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES82affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES22affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES81affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES87affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES84affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES85affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES83affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES80affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES86affected
CiscoCisco Virtualized Voice Browser11.6(1)_ES88affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES04affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES07affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES02affected
CiscoCisco Virtualized Voice Browser12.5(1)affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES08affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES03affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES06affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES09affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES14affected
CiscoCisco Virtualized Voice Browser12.5(1)SUaffected
CiscoCisco Virtualized Voice Browser12.5(1)_ES15affected
CiscoCisco Virtualized Voice Browser12.5(1)_SUaffected
CiscoCisco Virtualized Voice Browser12.5(1)_SU_ES01affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES11affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES12affected
CiscoCisco Virtualized Voice Browser12.5(2)_ETaffected
CiscoCisco Virtualized Voice Browser12.5(1)_SU_ES02affected
CiscoCisco Virtualized Voice Browser12.5(1)_ES10affected
CiscoCisco Virtualized Voice Browser12.0(1)affected
CiscoCisco Virtualized Voice Browser12.0(1)_ES02affected
CiscoCisco Virtualized Voice Browser12.0(1)_ES01affected
CiscoCisco Virtualized Voice Browser12.0(1)_ES06affected
CiscoCisco Virtualized Voice Browser12.0(1)_ES07affected
CiscoCisco Virtualized Voice Browser12.0(1)_ES05affected
CiscoCisco Virtualized Voice Browser12.0(1)_ES04affected
CiscoCisco Virtualized Voice Browser12.0(1)_ES03affected
CiscoCisco Virtualized Voice Browser12.0(1)_ES08affected
CiscoCisco Virtualized Voice Browser12.6(1)affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES04affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES03affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES09affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES06affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES08affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES05affected
CiscoCisco Virtualized Voice Browser12.6(2)_ES03affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES02affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES01affected
CiscoCisco Virtualized Voice Browser12.6(2)affected
CiscoCisco Virtualized Voice Browser12.6(2)_ET01affected
CiscoCisco Virtualized Voice Browser12.6(2)_ES02affected
CiscoCisco Virtualized Voice Browser12.6(2)_ES01affected
CiscoCisco Virtualized Voice Browser12.6(1)_ES07affected
CiscoCisco Packaged Contact Center Enterprise10.5(1)affected
CiscoCisco Packaged Contact Center Enterprise10.5(2)affected
CiscoCisco Packaged Contact Center Enterprise10.5(1)_ES7affected
CiscoCisco Packaged Contact Center Enterprise10.5(2)_ES8affected
CiscoCisco Packaged Contact Center Enterprise11.0(1)affected
CiscoCisco Packaged Contact Center Enterprise11.0(2)affected
CiscoCisco Packaged Contact Center Enterprise11.5(1)affected
CiscoCisco Packaged Contact Center Enterprise11.6(1)affected
CiscoCisco Packaged Contact Center Enterprise11.6(2)affected
CiscoCisco Packaged Contact Center Enterprise12.0(1)affected
CiscoCisco Packaged Contact Center Enterprise12.5(1)affected
CiscoCisco Packaged Contact Center Enterprise12.5(2)affected
CiscoCisco Packaged Contact Center Enterprise12.6(1)affected
CiscoCisco Packaged Contact Center Enterprise12.6(2)affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU10affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(1)affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(1)SU1affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(1)SU1aaffected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU1affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU2affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU3affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU4affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU5affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU6affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU7affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU8affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU9affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU2aaffected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU3aaffected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU4aaffected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU6aaffected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0(1)affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0(1a)affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0(1a)SU1affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0(1a)SU2affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0(1a)SU3affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0(1a)SU3aaffected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0(1a)SU4affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0.1affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0.2affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.0.5affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU1affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU2affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU3affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU3aaffected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU3baffected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU4affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU5affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU6affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU7affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU8affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU9affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU10affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection11.5(1)SU11affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.0(1)SU2affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.0(1)affected
CiscoCisco Unified Communications Manager / Cisco Unity Connection10.0(1)SU1affected

Weaknesses

  • CWE-502: Deserialization of Untrusted Data

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References