CVE-2025-20112: Cisco Unified Communications Products Privilege Escalation Vulnerability
Cisco · Cisco Emergency Responder
Affected: Cisco Emergency Responder · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 3% of scored CVEs
DescriptionCVE.org
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to escape the restricted shell and gain root privileges on the underlying operating system of an affected device. To successfully exploit this vulnerability, an attacker would need administrative access to the ESXi hypervisor.
Affected products10
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Cisco · Cisco Emergency Responder12.5(1a); 12.5(1)SU1; 12.5(1); 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4 and 16 more
- Cisco · Cisco Finesse11.0(1)ES_Rollback; 10.5(1)ES4; 11.6(1)ES3; 11.0(1)ES2; 12.0(1)ES2; 10.5(1)ES3 and 78 more
- Cisco · Cisco Prime Collaboration Deployment11.5(1); 11.0(1a); 11.5(1)SU1; 10.5(3); 12.6(1); 11.0(1) and 17 more
- Cisco · Cisco SocialMiner12.5(1)ES01; 10.5(1); 11.6(1); 10.6(1); 12.0(1)ES04; 10.6(2) and 11 more
- Cisco · Cisco Unified Communications Manager12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14 and 15 more
- Cisco · Cisco Unified Communications Manager IM and Presence Service12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14 and 12 more
- Cisco · Cisco Unified Contact Center Express10.5(1)SU1; 10.6(1); 11.6(1); 10.6(1)SU1; 10.6(1)SU3; 11.6(2) and 55 more
- Cisco · Cisco Unified Intelligence Center11.6(1); 10.5(1); 11.0(1); 11.5(1); 12.0(1); 12.5(1) and 16 more
- Cisco · Cisco Unity Connection12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14 and 13 more
- Cisco · Cisco Virtualized Voice Browser11.0(1); 11.6(1)_ES84; 11.5(1)_ES54; 11.5(1)_ES27; 11.5(1); 11.5(1)ES36 and 87 more
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2025-20112 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.