{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2024-20253", "ASSIGNER": "psirt@cisco.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Deserialization of Untrusted Data", "cweId": "CWE-502" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Cisco", "product": { "product_data": [ { "product_name": "Cisco Unified Contact Center Enterprise", "version": { "version_data": [ { "version_affected": "=", "version_value": "N/A" } ] } }, { "product_name": "Cisco Unity Connection", "version": { "version_data": [ { "version_affected": "=", "version_value": "12.0(1)SU1" }, { "version_affected": "=", "version_value": "12.0(1)SU2" }, { "version_affected": "=", "version_value": "12.0(1)SU3" }, { "version_affected": "=", "version_value": "12.0(1)SU4" }, { "version_affected": "=", "version_value": "12.0(1)SU5" }, { "version_affected": "=", "version_value": "12.5(1)" }, { "version_affected": "=", "version_value": "12.5(1)SU1" }, { "version_affected": "=", "version_value": "12.5(1)SU2" }, { "version_affected": "=", "version_value": "12.5(1)SU3" }, { "version_affected": "=", "version_value": "12.5(1)SU4" }, { "version_affected": "=", "version_value": "12.5(1)SU5" }, { "version_affected": "=", "version_value": "12.5(1)SU6" }, { "version_affected": "=", "version_value": "12.5(1)SU7" }, { "version_affected": "=", "version_value": "14" }, { "version_affected": "=", "version_value": "14SU1" }, { "version_affected": "=", "version_value": "14SU2" } ] } }, { "product_name": "Cisco Unified Communications Manager", "version": { "version_data": [ { "version_affected": "=", "version_value": "12.0(1)SU1" }, { "version_affected": "=", "version_value": "12.0(1)SU2" }, { "version_affected": "=", "version_value": "12.0(1)SU3" }, { "version_affected": "=", "version_value": "12.0(1)SU4" }, { "version_affected": "=", "version_value": "12.0(1)SU5" }, { "version_affected": "=", "version_value": "12.5(1)" }, { "version_affected": "=", "version_value": "12.5(1)SU1" }, { "version_affected": "=", "version_value": "12.5(1)SU2" }, { "version_affected": "=", "version_value": "12.5(1)SU3" }, { "version_affected": "=", "version_value": "12.5(1)SU4" }, { "version_affected": "=", "version_value": "12.5(1)SU5" }, { "version_affected": "=", "version_value": "12.5(1)SU6" }, { "version_affected": "=", "version_value": "12.5(1)SU7" }, { "version_affected": "=", "version_value": "12.5(1)SU7a" }, { "version_affected": "=", "version_value": "14" }, { "version_affected": "=", "version_value": "14SU1" }, { "version_affected": "=", "version_value": "14SU2" } ] } }, { "product_name": "Cisco Unified Contact Center Express", "version": { "version_data": [ { "version_affected": "=", "version_value": "8.5(1)" }, { "version_affected": "=", "version_value": "9.0(2)SU3ES04" }, { "version_affected": "=", "version_value": "10.0(1)SU1" }, { "version_affected": "=", "version_value": "10.0(1)SU1ES04" }, { "version_affected": "=", "version_value": "10.5(1)" }, { "version_affected": "=", "version_value": "10.5(1)SU1" }, { "version_affected": "=", "version_value": "10.5(1)SU1ES10" }, { "version_affected": "=", "version_value": "10.6(1)" }, { "version_affected": "=", "version_value": "10.6(1)SU1" }, { "version_affected": "=", "version_value": "10.6(1)SU3" }, { "version_affected": "=", "version_value": "10.6(1)SU2" }, { "version_affected": "=", "version_value": "10.6(1)SU3ES03" }, { "version_affected": "=", "version_value": "10.6(1)SU2ES04" }, { "version_affected": "=", "version_value": "10.6(1)SU3ES02" }, { "version_affected": "=", "version_value": "10.6(1)SU3ES01" }, { "version_affected": "=", "version_value": "11.0(1)SU1" }, { "version_affected": "=", "version_value": "11.0(1)SU1ES03" }, { "version_affected": "=", "version_value": "11.0(1)SU1ES02" }, { "version_affected": "=", "version_value": "11.5(1)SU1" }, { "version_affected": "=", "version_value": "11.5(1)SU1ES02" }, { "version_affected": "=", "version_value": "11.5(1)SU1ES01" }, { "version_affected": "=", "version_value": "11.5(1)SU1ES03" }, { "version_affected": "=", "version_value": "11.5(1)ES01" }, { "version_affected": "=", "version_value": "12.0(1)" }, { "version_affected": "=", "version_value": "12.0(1)ES01" }, { "version_affected": "=", "version_value": "12.0(1)ES03" }, { "version_affected": "=", "version_value": "12.0(1)ES04" }, { "version_affected": "=", "version_value": "12.0(1)ES02" }, { "version_affected": "=", "version_value": "12.5(1)" }, { "version_affected": "=", "version_value": "12.5(1)SU1" }, { "version_affected": "=", "version_value": "12.5(1)SU2" }, { "version_affected": "=", "version_value": "12.5(1)SU3" }, { "version_affected": "=", "version_value": "12.5(1)_SU01_ES03" }, { "version_affected": "=", "version_value": "12.5(1)ES03" }, { "version_affected": "=", "version_value": "12.5(1)_SU01_ES01" }, { "version_affected": "=", "version_value": "12.5(1)_SU02_ES02" }, { "version_affected": "=", "version_value": "12.5(1)_SU01_ES02" }, { "version_affected": "=", "version_value": "12.5(1)_SU02_ES03" }, { "version_affected": "=", "version_value": "12.5(1)ES01" }, { "version_affected": "=", "version_value": "12.5(1)_SU02_ES01" }, { "version_affected": "=", "version_value": "12.5(1)ES02" }, { "version_affected": "=", "version_value": "12.5(1)_SU03_ES01" }, { "version_affected": "=", "version_value": "12.5(1)_SU02_ES04" }, { "version_affected": "=", "version_value": "12.5(1)_SU03_ES02" }, { "version_affected": "=", "version_value": "12.5(1)_SU03_ES03" }, { "version_affected": "=", "version_value": "12.5(1)_SU03_ES04" }, { "version_affected": "=", "version_value": "11.6(1)" }, { "version_affected": "=", "version_value": "11.6(2)" }, { "version_affected": "=", "version_value": "11.6(1)ES01" }, { "version_affected": "=", "version_value": "11.6(2)ES06" }, { "version_affected": "=", "version_value": "11.6(1)ES02" }, { "version_affected": "=", "version_value": "11.6(2)ES01" }, { "version_affected": "=", "version_value": "11.6(2)ES03" }, { "version_affected": "=", "version_value": "11.6(2)ES07" }, { "version_affected": "=", "version_value": "11.6(2)ES08" }, { "version_affected": "=", "version_value": "11.6(2)ES02" }, { "version_affected": "=", "version_value": "11.6(2)ES05" }, { "version_affected": "=", "version_value": "11.6(2)ES04" } ] } }, { "product_name": "Cisco Unified Communications Manager IM and Presence Service", "version": { "version_data": [ { "version_affected": "=", "version_value": "10.5(1)" }, { "version_affected": "=", "version_value": "10.5(2)" }, { "version_affected": "=", "version_value": "10.5(2a)" }, { "version_affected": "=", "version_value": "10.5(2b)" }, { "version_affected": "=", "version_value": "10.5(2)SU3" }, { "version_affected": "=", "version_value": "10.5(2)SU2a" }, { "version_affected": "=", "version_value": "10.5(2)SU4a" }, { "version_affected": "=", "version_value": "10.5(2)SU4" }, { "version_affected": "=", "version_value": "10.5(1)SU3" }, { "version_affected": "=", "version_value": "10.5(1)SU1" }, { "version_affected": "=", "version_value": "10.5(2)SU1" }, { "version_affected": "=", "version_value": "10.5(2)SU2" }, { "version_affected": "=", "version_value": "10.5(1)SU2" }, { "version_affected": "=", "version_value": "11.5(1)" }, { "version_affected": "=", "version_value": "11.5(1)SU1" }, { "version_affected": "=", "version_value": "11.5(1)SU2" }, { "version_affected": "=", "version_value": "11.5(1)SU3" }, { "version_affected": "=", "version_value": "11.5(1)SU3a" }, { "version_affected": "=", "version_value": "11.5(1)SU4" }, { "version_affected": "=", "version_value": "11.5(1)SU5" }, { "version_affected": "=", "version_value": "11.5(1)SU5a" }, { "version_affected": "=", "version_value": "11.5(1)SU6" }, { "version_affected": "=", "version_value": "11.5(1)SU7" }, { "version_affected": "=", "version_value": "11.5(1)SU8" }, { "version_affected": "=", "version_value": "11.5(1)SU9" }, { "version_affected": "=", "version_value": "11.5(1)SU10" }, { "version_affected": "=", "version_value": "11.5(1)SU11" }, { "version_affected": "=", "version_value": "11.0(1)" }, { "version_affected": "=", "version_value": "11.0(1)SU1" }, { "version_affected": "=", "version_value": "12.5(1)" }, { "version_affected": "=", "version_value": "12.5(1)SU1" }, { "version_affected": "=", "version_value": "12.5(1)SU2" }, { "version_affected": "=", "version_value": "12.5(1)SU3" }, { "version_affected": "=", "version_value": "12.5(1)SU4" }, { "version_affected": "=", "version_value": "12.5(1)SU5" }, { "version_affected": "=", "version_value": "12.5(1)SU6" }, { "version_affected": "=", "version_value": "12.5(1)SU7" }, { "version_affected": "=", "version_value": "14" }, { "version_affected": "=", "version_value": "14SU1" }, { "version_affected": "=", "version_value": "14SU2" }, { "version_affected": "=", "version_value": "14SU2a" }, { "version_affected": "=", "version_value": "10.0(1)" }, { "version_affected": "=", "version_value": "10.0(1)SU1" }, { "version_affected": "=", "version_value": "10.0(1)SU2" } ] } }, { "product_name": "Cisco Virtualized Voice Browser", "version": { "version_data": [ { "version_affected": "=", "version_value": "11.0(1)" }, { "version_affected": "=", "version_value": "11.5(1)" }, { "version_affected": "=", "version_value": "11.5(1)ES29" }, { "version_affected": "=", "version_value": "11.5(1)ES32" }, { "version_affected": "=", "version_value": "11.5(1)_ES43" }, { "version_affected": "=", "version_value": "11.5(1)_ES54" }, { "version_affected": "=", "version_value": "11.5(1)_ES27" }, { "version_affected": "=", "version_value": "11.5(1)ES36" }, { "version_affected": "=", "version_value": "11.5(1)_ES32" }, { "version_affected": "=", "version_value": "11.5(1)_ES29" }, { "version_affected": "=", "version_value": "11.5(1)_ES36" }, { "version_affected": "=", "version_value": "11.5(1)ES43" }, { "version_affected": "=", "version_value": "11.5(1)_ES53" }, { "version_affected": "=", "version_value": "11.5(1)ES27" }, { "version_affected": "=", "version_value": "11.6(1)" }, { "version_affected": "=", "version_value": "11.6(1)_ES82" }, { "version_affected": "=", "version_value": "11.6(1)_ES22" }, { "version_affected": "=", "version_value": "11.6(1)_ES81" }, { "version_affected": "=", "version_value": "11.6(1)_ES87" }, { "version_affected": "=", "version_value": "11.6(1)_ES84" }, { "version_affected": "=", "version_value": "11.6(1)_ES85" }, { "version_affected": "=", "version_value": "11.6(1)_ES83" }, { "version_affected": "=", "version_value": "11.6(1)_ES80" }, { "version_affected": "=", "version_value": "11.6(1)_ES86" }, { "version_affected": "=", "version_value": "11.6(1)_ES88" }, { "version_affected": "=", "version_value": "12.5(1)_ES04" }, { "version_affected": "=", "version_value": "12.5(1)_ES07" }, { "version_affected": "=", "version_value": "12.5(1)_ES02" }, { "version_affected": "=", "version_value": "12.5(1)" }, { "version_affected": "=", "version_value": "12.5(1)_ES08" }, { "version_affected": "=", "version_value": "12.5(1)_ES03" }, { "version_affected": "=", "version_value": "12.5(1)_ES06" }, { "version_affected": "=", "version_value": "12.5(1)_ES09" }, { "version_affected": "=", "version_value": "12.5(1)_ES14" }, { "version_affected": "=", "version_value": "12.5(1)SU" }, { "version_affected": "=", "version_value": "12.5(1)_ES15" }, { "version_affected": "=", "version_value": "12.5(1)_SU" }, { "version_affected": "=", "version_value": "12.5(1)_SU_ES01" }, { "version_affected": "=", "version_value": "12.5(1)_ES11" }, { "version_affected": "=", "version_value": "12.5(1)_ES12" }, { "version_affected": "=", "version_value": "12.5(2)_ET" }, { "version_affected": "=", "version_value": "12.5(1)_SU_ES02" }, { "version_affected": "=", "version_value": "12.5(1)_ES10" }, { "version_affected": "=", "version_value": "12.0(1)" }, { "version_affected": "=", "version_value": "12.0(1)_ES02" }, { "version_affected": "=", "version_value": "12.0(1)_ES01" }, { "version_affected": "=", "version_value": "12.0(1)_ES06" }, { "version_affected": "=", "version_value": "12.0(1)_ES07" }, { "version_affected": "=", "version_value": "12.0(1)_ES05" }, { "version_affected": "=", "version_value": "12.0(1)_ES04" }, { "version_affected": "=", "version_value": "12.0(1)_ES03" }, { "version_affected": "=", "version_value": "12.0(1)_ES08" }, { "version_affected": "=", "version_value": "12.6(1)" }, { "version_affected": "=", "version_value": "12.6(1)_ES04" }, { "version_affected": "=", "version_value": "12.6(1)_ES03" }, { "version_affected": "=", "version_value": "12.6(1)_ES09" }, { "version_affected": "=", "version_value": "12.6(1)_ES06" }, { "version_affected": "=", "version_value": "12.6(1)_ES08" }, { "version_affected": "=", "version_value": "12.6(1)_ES05" }, { "version_affected": "=", "version_value": "12.6(2)_ES03" }, { "version_affected": "=", "version_value": "12.6(1)_ES02" }, { "version_affected": "=", "version_value": "12.6(1)_ES01" }, { "version_affected": "=", "version_value": "12.6(2)" }, { "version_affected": "=", "version_value": "12.6(2)_ET01" }, { "version_affected": "=", "version_value": "12.6(2)_ES02" }, { "version_affected": "=", "version_value": "12.6(2)_ES01" }, { "version_affected": "=", "version_value": "12.6(1)_ES07" } ] } }, { "product_name": "Cisco Packaged Contact Center Enterprise", "version": { "version_data": [ { "version_affected": "=", "version_value": "10.5(1)" }, { "version_affected": "=", "version_value": "10.5(2)" }, { "version_affected": "=", "version_value": "10.5(1)_ES7" }, { "version_affected": "=", "version_value": "10.5(2)_ES8" }, { "version_affected": "=", "version_value": "11.0(1)" }, { "version_affected": "=", "version_value": "11.0(2)" }, { "version_affected": "=", "version_value": "11.5(1)" }, { "version_affected": "=", "version_value": "11.6(1)" }, { "version_affected": "=", "version_value": "11.6(2)" }, { "version_affected": "=", "version_value": "12.0(1)" }, { "version_affected": "=", "version_value": "12.5(1)" }, { "version_affected": "=", "version_value": "12.5(2)" }, { "version_affected": "=", "version_value": "12.6(1)" }, { "version_affected": "=", "version_value": "12.6(2)" } ] } }, { "product_name": "Cisco Unified Communications Manager / Cisco Unity Connection", "version": { "version_data": [ { "version_affected": "=", "version_value": "10.5(2)SU10" }, { "version_affected": "=", "version_value": "10.5(1)" }, { "version_affected": "=", "version_value": "10.5(1)SU1" }, { "version_affected": "=", "version_value": "10.5(1)SU1a" }, { "version_affected": "=", "version_value": "10.5(2)" }, { "version_affected": "=", "version_value": "10.5(2)SU1" }, { "version_affected": "=", "version_value": "10.5(2)SU2" }, { "version_affected": "=", "version_value": "10.5(2)SU3" }, { "version_affected": "=", "version_value": "10.5(2)SU4" }, { "version_affected": "=", "version_value": "10.5(2)SU5" }, { "version_affected": "=", "version_value": "10.5(2)SU6" }, { "version_affected": "=", "version_value": "10.5(2)SU7" }, { "version_affected": "=", "version_value": "10.5(2)SU8" }, { "version_affected": "=", "version_value": "10.5(2)SU9" }, { "version_affected": "=", "version_value": "10.5(2)SU2a" }, { "version_affected": "=", "version_value": "10.5(2)SU3a" }, { "version_affected": "=", "version_value": "10.5(2)SU4a" }, { "version_affected": "=", "version_value": "10.5(2)SU6a" }, { "version_affected": "=", "version_value": "11.0(1)" }, { "version_affected": "=", "version_value": "11.0(1a)" }, { "version_affected": "=", "version_value": "11.0(1a)SU1" }, { "version_affected": "=", "version_value": "11.0(1a)SU2" }, { "version_affected": "=", "version_value": "11.0(1a)SU3" }, { "version_affected": "=", "version_value": "11.0(1a)SU3a" }, { "version_affected": "=", "version_value": "11.0(1a)SU4" }, { "version_affected": "=", "version_value": "11.0.1" }, { "version_affected": "=", "version_value": "11.0.2" }, { "version_affected": "=", "version_value": "11.0.5" }, { "version_affected": "=", "version_value": "11.5(1)" }, { "version_affected": "=", "version_value": "11.5(1)SU1" }, { "version_affected": "=", "version_value": "11.5(1)SU2" }, { "version_affected": "=", "version_value": "11.5(1)SU3" }, { "version_affected": "=", "version_value": "11.5(1)SU3a" }, { "version_affected": "=", "version_value": "11.5(1)SU3b" }, { "version_affected": "=", "version_value": "11.5(1)SU4" }, { "version_affected": "=", "version_value": "11.5(1)SU5" }, { "version_affected": "=", "version_value": "11.5(1)SU6" }, { "version_affected": "=", "version_value": "11.5(1)SU7" }, { "version_affected": "=", "version_value": "11.5(1)SU8" }, { "version_affected": "=", "version_value": "11.5(1)SU9" }, { "version_affected": "=", "version_value": "11.5(1)SU10" }, { "version_affected": "=", "version_value": "11.5(1)SU11" }, { "version_affected": "=", "version_value": "10.0(1)SU2" }, { "version_affected": "=", "version_value": "10.0(1)" }, { "version_affected": "=", "version_value": "10.0(1)SU1" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm", "refsource": "MISC", "name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm" } ] }, "source": { "advisory": "cisco-sa-cucm-rce-bWNzQcUm", "discovery": "EXTERNAL", "defects": [ "CSCwe18830", "CSCwe18773", "CSCwe18840", "CSCwd64292", "CSCwd64245", "CSCwd64276" ] }, "exploit": [ { "lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory." } ], "impact": { "cvss": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H", "baseScore": 9.9, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } ] } }