CVE-2025-20278

Wednesday, June 04, 2025

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Summary

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user.

This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.

Affected Software

Vendor	Product	Version Range	Status
Cisco	Cisco Finesse	`11.0(1)ES_Rollback`	affected
Cisco	Cisco Finesse	`10.5(1)ES4`	affected
Cisco	Cisco Finesse	`11.6(1)ES3`	affected
Cisco	Cisco Finesse	`11.0(1)ES2`	affected
Cisco	Cisco Finesse	`12.0(1)ES2`	affected
Cisco	Cisco Finesse	`10.5(1)ES3`	affected
Cisco	Cisco Finesse	`11.0(1)`	affected
Cisco	Cisco Finesse	`11.6(1)FIPS`	affected
Cisco	Cisco Finesse	`11.6(1)ES4`	affected
Cisco	Cisco Finesse	`11.0(1)ES3`	affected
Cisco	Cisco Finesse	`10.5(1)ES6`	affected
Cisco	Cisco Finesse	`11.0(1)ES7`	affected
Cisco	Cisco Finesse	`11.5(1)ES4`	affected
Cisco	Cisco Finesse	`10.5(1)ES8`	affected
Cisco	Cisco Finesse	`11.5(1)`	affected
Cisco	Cisco Finesse	`11.6(1)`	affected
Cisco	Cisco Finesse	`10.5(1)ES10`	affected
Cisco	Cisco Finesse	`11.6(1)ES2`	affected
Cisco	Cisco Finesse	`11.6(1)ES`	affected
Cisco	Cisco Finesse	`11.0(1)ES6`	affected
Cisco	Cisco Finesse	`11.0(1)ES4`	affected
Cisco	Cisco Finesse	`12.0(1)`	affected
Cisco	Cisco Finesse	`11.6(1)ES7`	affected
Cisco	Cisco Finesse	`10.5(1)ES7`	affected
Cisco	Cisco Finesse	`11.6(1)ES8`	affected
Cisco	Cisco Finesse	`11.5(1)ES1`	affected
Cisco	Cisco Finesse	`11.6(1)ES1`	affected
Cisco	Cisco Finesse	`11.5(1)ES5`	affected
Cisco	Cisco Finesse	`11.0(1)ES1`	affected
Cisco	Cisco Finesse	`10.5(1)`	affected
Cisco	Cisco Finesse	`11.6(1)ES6`	affected
Cisco	Cisco Finesse	`10.5(1)ES2`	affected
Cisco	Cisco Finesse	`12.0(1)ES1`	affected
Cisco	Cisco Finesse	`11.0(1)ES5`	affected
Cisco	Cisco Finesse	`10.5(1)ES5`	affected
Cisco	Cisco Finesse	`11.5(1)ES3`	affected
Cisco	Cisco Finesse	`11.5(1)ES2`	affected
Cisco	Cisco Finesse	`10.5(1)ES9`	affected
Cisco	Cisco Finesse	`11.6(1)ES5`	affected
Cisco	Cisco Finesse	`11.6(1)ES9`	affected
Cisco	Cisco Finesse	`11.5(1)ES6`	affected
Cisco	Cisco Finesse	`10.5(1)ES1`	affected
Cisco	Cisco Finesse	`12.5(1)`	affected
Cisco	Cisco Finesse	`12.0(1)ES3`	affected
Cisco	Cisco Finesse	`11.6(1)ES10`	affected
Cisco	Cisco Finesse	`12.5(1)ES1`	affected
Cisco	Cisco Finesse	`12.5(1)ES2`	affected
Cisco	Cisco Finesse	`12.0(1)ES4`	affected
Cisco	Cisco Finesse	`12.5(1)ES3`	affected
Cisco	Cisco Finesse	`12.0(1)ES5`	affected
Cisco	Cisco Finesse	`12.5(1)ES4`	affected
Cisco	Cisco Finesse	`12.0(1)ES6`	affected
Cisco	Cisco Finesse	`12.5(1)ES5`	affected
Cisco	Cisco Finesse	`12.5(1)ES6`	affected
Cisco	Cisco Finesse	`12.0(1)ES7`	affected
Cisco	Cisco Finesse	`12.6(1)`	affected
Cisco	Cisco Finesse	`12.5(1)ES7`	affected
Cisco	Cisco Finesse	`11.6(1)ES11`	affected
Cisco	Cisco Finesse	`12.6(1)ES1`	affected
Cisco	Cisco Finesse	`12.0(1)ES8`	affected
Cisco	Cisco Finesse	`12.5(1)ES8`	affected
Cisco	Cisco Finesse	`12.6(1)ES2`	affected
Cisco	Cisco Finesse	`12.6(1)ES3`	affected
Cisco	Cisco Finesse	`12.6(1)ES4`	affected
Cisco	Cisco Finesse	`12.6(1)ES5`	affected
Cisco	Cisco Finesse	`12.5(2)`	affected
Cisco	Cisco Finesse	`12.5(1)_SU`	affected
Cisco	Cisco Finesse	`12.5(1)SU`	affected
Cisco	Cisco Finesse	`12.6(1)ES6`	affected
Cisco	Cisco Finesse	`12.5(1)SU ES1`	affected
Cisco	Cisco Finesse	`12.6(1)ES7`	affected
Cisco	Cisco Finesse	`12.6(1)ES7_ET`	affected
Cisco	Cisco Finesse	`12.6(2)`	affected
Cisco	Cisco Finesse	`12.6(1)ES8`	affected
Cisco	Cisco Finesse	`12.6(1)ES9`	affected
Cisco	Cisco Finesse	`12.6(2)ES1`	affected
Cisco	Cisco Finesse	`12.6(1)ES10`	affected
Cisco	Cisco Finesse	`12.5(1)SU ES2`	affected
Cisco	Cisco Finesse	`12.6(1)ES11`	affected
Cisco	Cisco Finesse	`12.6(2)ES2`	affected
Cisco	Cisco Finesse	`12.6(2)ES3`	affected
Cisco	Cisco Finesse	`12.5(1)SU ES3`	affected
Cisco	Cisco Finesse	`12.6(2)ES4`	affected
Cisco	Cisco Finesse	`12.6(2)ES5`	affected
Cisco	Cisco SocialMiner	`12.5(1)ES01`	affected
Cisco	Cisco SocialMiner	`10.5(1)`	affected
Cisco	Cisco SocialMiner	`11.6(1)`	affected
Cisco	Cisco SocialMiner	`10.6(1)`	affected
Cisco	Cisco SocialMiner	`12.0(1)ES04`	affected
Cisco	Cisco SocialMiner	`10.6(2)`	affected
Cisco	Cisco SocialMiner	`12.5(1)`	affected
Cisco	Cisco SocialMiner	`11.6(2)`	affected
Cisco	Cisco SocialMiner	`12.0(1)`	affected
Cisco	Cisco SocialMiner	`12.0(1)ES02`	affected
Cisco	Cisco SocialMiner	`11.0(1)`	affected
Cisco	Cisco SocialMiner	`11.5(1)`	affected
Cisco	Cisco SocialMiner	`11.5(1)SU1`	affected
Cisco	Cisco SocialMiner	`12.0(1)ES03`	affected
Cisco	Cisco SocialMiner	`12.5(1)SU3`	affected
Cisco	Cisco SocialMiner	`12.5(1)SU1`	affected
Cisco	Cisco SocialMiner	`12.5(1)SU2`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU2`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU1`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU3`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU4`	affected
Cisco	Cisco Unified Communications Manager	`14`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU5`	affected
Cisco	Cisco Unified Communications Manager	`14SU1`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU6`	affected
Cisco	Cisco Unified Communications Manager	`14SU2`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU7`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU7a`	affected
Cisco	Cisco Unified Communications Manager	`14SU3`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU8`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU8a`	affected
Cisco	Cisco Unified Communications Manager	`15`	affected
Cisco	Cisco Unified Communications Manager	`15SU1`	affected
Cisco	Cisco Unified Communications Manager	`14SU4`	affected
Cisco	Cisco Unified Communications Manager	`14SU4a`	affected
Cisco	Cisco Unified Communications Manager	`15SU1a`	affected
Cisco	Cisco Unified Communications Manager	`12.5(1)SU9`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU1`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU2`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU3`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU4`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`14`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU5`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`14SU1`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU6`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`14SU2`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`14SU2a`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU7`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`14SU3`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU8`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`15`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`Recovery ISO`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`15SU1`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`14SU4`	affected
Cisco	Cisco Unified Communications Manager IM and Presence Service	`12.5(1)SU9`	affected
Cisco	Cisco Unified Contact Center Express	`10.6(1)`	affected
Cisco	Cisco Unified Contact Center Express	`10.5(1)SU1`	affected
Cisco	Cisco Unified Contact Center Express	`10.6(1)SU3`	affected
Cisco	Cisco Unified Contact Center Express	`12.0(1)`	affected
Cisco	Cisco Unified Contact Center Express	`10.0(1)SU1`	affected
Cisco	Cisco Unified Contact Center Express	`10.6(1)SU1`	affected
Cisco	Cisco Unified Contact Center Express	`11.0(1)SU1`	affected
Cisco	Cisco Unified Contact Center Express	`11.5(1)SU1`	affected
Cisco	Cisco Unified Contact Center Express	`10.5(1)`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(1)`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)SU1`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)SU2`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)SU3`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU03_ES01`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU03_ES02`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU02_ES03`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU02_ES04`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU02_ES02`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU01_ES02`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU01_ES03`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU02_ES01`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)ES07`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)ES08`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU01_ES01`	affected
Cisco	Cisco Unified Contact Center Express	`12.0(1)ES04`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)ES02`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)ES03`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)ES06`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)ES01`	affected
Cisco	Cisco Unified Contact Center Express	`12.0(1)ES03`	affected
Cisco	Cisco Unified Contact Center Express	`12.0(1)ES01`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)ES05`	affected
Cisco	Cisco Unified Contact Center Express	`12.0(1)ES02`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)ES04`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)ES03`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)ES02`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(2)ES01`	affected
Cisco	Cisco Unified Contact Center Express	`10.6(1)SU3ES03`	affected
Cisco	Cisco Unified Contact Center Express	`11.0(1)SU1ES03`	affected
Cisco	Cisco Unified Contact Center Express	`10.6(1)SU3ES01`	affected
Cisco	Cisco Unified Contact Center Express	`10.5(1)SU1ES10`	affected
Cisco	Cisco Unified Contact Center Express	`10.0(1)SU1ES04`	affected
Cisco	Cisco Unified Contact Center Express	`11.5(1)SU1ES03`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(1)ES02`	affected
Cisco	Cisco Unified Contact Center Express	`11.5(1)ES01`	affected
Cisco	Cisco Unified Contact Center Express	`9.0(2)SU3ES04`	affected
Cisco	Cisco Unified Contact Center Express	`10.6(1)SU2`	affected
Cisco	Cisco Unified Contact Center Express	`10.6(1)SU2ES04`	affected
Cisco	Cisco Unified Contact Center Express	`11.6(1)ES01`	affected
Cisco	Cisco Unified Contact Center Express	`10.6(1)SU3ES02`	affected
Cisco	Cisco Unified Contact Center Express	`11.5(1)SU1ES02`	affected
Cisco	Cisco Unified Contact Center Express	`11.5(1)SU1ES01`	affected
Cisco	Cisco Unified Contact Center Express	`8.5(1)`	affected
Cisco	Cisco Unified Contact Center Express	`11.0(1)SU1ES02`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU03_ES03`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU03_ES04`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU03_ES05`	affected
Cisco	Cisco Unified Contact Center Express	`12.5(1)_SU03_ES06`	affected
Cisco	Cisco Unified Intelligence Center	`11.6(1)`	affected
Cisco	Cisco Unified Intelligence Center	`10.5(1)`	affected
Cisco	Cisco Unified Intelligence Center	`11.0(1)`	affected
Cisco	Cisco Unified Intelligence Center	`11.5(1)`	affected
Cisco	Cisco Unified Intelligence Center	`12.0(1)`	affected
Cisco	Cisco Unified Intelligence Center	`12.5(1)`	affected
Cisco	Cisco Unified Intelligence Center	`11.0(2)`	affected
Cisco	Cisco Unified Intelligence Center	`12.6(1)`	affected
Cisco	Cisco Unified Intelligence Center	`12.5(1)SU`	affected
Cisco	Cisco Unified Intelligence Center	`12.6(1)_ET`	affected
Cisco	Cisco Unified Intelligence Center	`12.6(1)_ES05_ET`	affected
Cisco	Cisco Unified Intelligence Center	`11.0(3)`	affected
Cisco	Cisco Unified Intelligence Center	`12.6(2)`	affected
Cisco	Cisco Unified Intelligence Center	`12.6(2)_504_Issue_ET`	affected
Cisco	Cisco Unified Intelligence Center	`12.6.1_ExcelIssue_ET`	affected
Cisco	Cisco Unified Intelligence Center	`12.6(2)_Permalink_ET`	affected
Cisco	Cisco Unified Intelligence Center	`12.6.2_CSCwk19536_ET`	affected
Cisco	Cisco Unified Intelligence Center	`12.6.2_CSCwm96922_ET`	affected
Cisco	Cisco Unified Intelligence Center	`12.6.2_Amq_OOS_ET`	affected
Cisco	Cisco Unified Intelligence Center	`12.5(2)ET_CSCwi79933`	affected
Cisco	Cisco Unified Intelligence Center	`12.6(2)_ET`	affected
Cisco	Cisco Unified Intelligence Center	`12.6.2_CSCwn48501_ET`	affected
Cisco	Cisco Unity Connection	`12.5(1)`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU1`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU2`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU3`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU4`	affected
Cisco	Cisco Unity Connection	`14`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU5`	affected
Cisco	Cisco Unity Connection	`14SU1`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU6`	affected
Cisco	Cisco Unity Connection	`14SU2`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU7`	affected
Cisco	Cisco Unity Connection	`14SU3`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU8`	affected
Cisco	Cisco Unity Connection	`14SU3a`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU8a`	affected
Cisco	Cisco Unity Connection	`15`	affected
Cisco	Cisco Unity Connection	`15SU1`	affected
Cisco	Cisco Unity Connection	`14SU4`	affected
Cisco	Cisco Unity Connection	`12.5(1)SU9`	affected
Cisco	Cisco Virtualized Voice Browser	`11.0(1)`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES84`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)_ES54`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)_ES27`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)ES36`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)_ES01`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES85`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES05`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)_ES32`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES83`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)_ES29`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)_ES06`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)_ES07`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES80`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)_ES05`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)_ES36`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)_ES53`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES08`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)ES43`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)_ES03`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES86`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)_ES04`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)ES27`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES03`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES88`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES06`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES82`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)ES29`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES04`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES07`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES87`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES81`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)`	affected
Cisco	Cisco Virtualized Voice Browser	`11.6(1)_ES22`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)_ES43`	affected
Cisco	Cisco Virtualized Voice Browser	`11.5(1)ES32`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)_ES02`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES02`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES09`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES01`	affected
Cisco	Cisco Virtualized Voice Browser	`12.0(1)_ES08`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES10`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES02`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES11`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES12`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES03`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES13`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES14`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES04`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES05`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES15`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES06`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ET`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES16`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)SU`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_SU`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_SU_ES01`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES07`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_ES17`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES08`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES09`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(1)_ES10`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1)_SU_ES02`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ES01`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ET01`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(2)_ET`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ES02`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ET_Streaming`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)ET_Transcribe`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ES03`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)ET_NuanceMix`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)ET_FileUpload`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ET02`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ES04`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6.2ET_RTPfallback`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6.2ET_CSCwf55306`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6.2_ET_CSCwj36712`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5.2 ET-CSCwj33374`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5(1) SU ET`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)ET_CSCwj87296`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ES05`	affected
Cisco	Cisco Virtualized Voice Browser	`12.5.2_ET_CSCvz27014`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ET`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6.2-ET`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)ET_CSCwk83135`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6.2_ET_CX_ALAW`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6.2-ET01-SSL`	affected
Cisco	Cisco Virtualized Voice Browser	`12.6(2)_ES06`	affected

Weaknesses

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: total

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vos-command-inject-65s2UCYy

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.