CVE-2024-20253: Cisco Unified Contact Center Enterprise vulnerability
Cisco · Cisco Unified Contact Center Enterprise
Affected: Cisco Unified Contact Center Enterprise · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 84% of scored CVEs
DescriptionCVE.org
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device.
Affected products8
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Cisco · Cisco Unified Contact Center EnterpriseVersions not stated
- Cisco · Cisco Unity Connection12.0(1)SU1; 12.0(1)SU2; 12.0(1)SU3; 12.0(1)SU4; 12.0(1)SU5; 12.5(1) and 10 more
- Cisco · Cisco Unified Communications Manager12.0(1)SU1; 12.0(1)SU2; 12.0(1)SU3; 12.0(1)SU4; 12.0(1)SU5; 12.5(1) and 11 more
- Cisco · Cisco Unified Contact Center Express8.5(1); 9.0(2)SU3ES04; 10.0(1)SU1; 10.0(1)SU1ES04; 10.5(1); 10.5(1)SU1 and 52 more
- Cisco · Cisco Unified Communications Manager IM and Presence Service10.5(1); 10.5(2); 10.5(2a); 10.5(2b); 10.5(2)SU3; 10.5(2)SU2a and 38 more
- Cisco · Cisco Virtualized Voice Browser11.0(1); 11.5(1); 11.5(1)ES29; 11.5(1)ES32; 11.5(1)_ES43; 11.5(1)_ES54 and 61 more
- Cisco · Cisco Packaged Contact Center Enterprise10.5(1); 10.5(2); 10.5(1)_ES7; 10.5(2)_ES8; 11.0(1); 11.0(2) and 8 more
- Cisco · Cisco Unified Communications Manager / Cisco Unity Connection10.5(2)SU10; 10.5(1); 10.5(1)SU1; 10.5(1)SU1a; 10.5(2); 10.5(2)SU1 and 39 more
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Cisco
- Published
- January 2024
CoverageNo articles yet
No CyberSIXT article names CVE-2024-20253 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.