{"affected": [{"affectedData": [{"product": "Cisco Unified Contact Center Enterprise", "vendor": "Cisco", "versions": [{"status": "affected", "version": "N/A"}]}, {"product": "Cisco Unity Connection", "vendor": "Cisco", "versions": [{"status": "affected", "version": "12.0(1)SU1"}, {"status": "affected", "version": "12.0(1)SU2"}, {"status": "affected", "version": "12.0(1)SU3"}, {"status": "affected", "version": "12.0(1)SU4"}, {"status": "affected", "version": "12.0(1)SU5"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.5(1)SU1"}, {"status": "affected", "version": "12.5(1)SU2"}, {"status": "affected", "version": "12.5(1)SU3"}, {"status": "affected", "version": "12.5(1)SU4"}, {"status": "affected", "version": "12.5(1)SU5"}, {"status": "affected", "version": "12.5(1)SU6"}, {"status": "affected", "version": "12.5(1)SU7"}, {"status": "affected", "version": "14"}, {"status": "affected", "version": "14SU1"}, {"status": "affected", "version": "14SU2"}]}, {"product": "Cisco Unified Communications Manager", "vendor": "Cisco", "versions": [{"status": "affected", "version": "12.0(1)SU1"}, {"status": "affected", "version": "12.0(1)SU2"}, {"status": "affected", "version": "12.0(1)SU3"}, {"status": "affected", "version": "12.0(1)SU4"}, {"status": "affected", "version": "12.0(1)SU5"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.5(1)SU1"}, {"status": "affected", "version": "12.5(1)SU2"}, {"status": "affected", "version": "12.5(1)SU3"}, {"status": "affected", "version": "12.5(1)SU4"}, {"status": "affected", "version": "12.5(1)SU5"}, {"status": "affected", "version": "12.5(1)SU6"}, {"status": "affected", "version": "12.5(1)SU7"}, {"status": "affected", "version": "12.5(1)SU7a"}, {"status": "affected", "version": "14"}, {"status": "affected", "version": "14SU1"}, {"status": "affected", "version": "14SU2"}]}, {"product": "Cisco Unified Contact Center Express", "vendor": "Cisco", "versions": [{"status": "affected", "version": "8.5(1)"}, {"status": "affected", "version": "9.0(2)SU3ES04"}, {"status": "affected", "version": "10.0(1)SU1"}, {"status": "affected", "version": "10.0(1)SU1ES04"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "10.5(1)SU1"}, {"status": "affected", "version": "10.5(1)SU1ES10"}, {"status": "affected", "version": "10.6(1)"}, {"status": "affected", "version": "10.6(1)SU1"}, {"status": "affected", "version": "10.6(1)SU3"}, {"status": "affected", "version": "10.6(1)SU2"}, {"status": "affected", "version": "10.6(1)SU3ES03"}, {"status": "affected", "version": "10.6(1)SU2ES04"}, {"status": "affected", "version": "10.6(1)SU3ES02"}, {"status": "affected", "version": "10.6(1)SU3ES01"}, {"status": "affected", "version": "11.0(1)SU1"}, {"status": "affected", "version": "11.0(1)SU1ES03"}, {"status": "affected", "version": "11.0(1)SU1ES02"}, {"status": "affected", "version": "11.5(1)SU1"}, {"status": "affected", "version": "11.5(1)SU1ES02"}, {"status": "affected", "version": "11.5(1)SU1ES01"}, {"status": "affected", "version": "11.5(1)SU1ES03"}, {"status": "affected", "version": "11.5(1)ES01"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "12.0(1)ES01"}, {"status": "affected", "version": "12.0(1)ES03"}, {"status": "affected", "version": "12.0(1)ES04"}, {"status": "affected", "version": "12.0(1)ES02"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.5(1)SU1"}, {"status": "affected", "version": "12.5(1)SU2"}, {"status": "affected", "version": "12.5(1)SU3"}, {"status": "affected", "version": "12.5(1)_SU01_ES03"}, {"status": "affected", "version": "12.5(1)ES03"}, {"status": "affected", "version": "12.5(1)_SU01_ES01"}, {"status": "affected", "version": "12.5(1)_SU02_ES02"}, {"status": "affected", "version": "12.5(1)_SU01_ES02"}, {"status": "affected", "version": "12.5(1)_SU02_ES03"}, {"status": "affected", "version": "12.5(1)ES01"}, {"status": "affected", "version": "12.5(1)_SU02_ES01"}, {"status": "affected", "version": "12.5(1)ES02"}, {"status": "affected", "version": "12.5(1)_SU03_ES01"}, {"status": "affected", "version": "12.5(1)_SU02_ES04"}, {"status": "affected", "version": "12.5(1)_SU03_ES02"}, {"status": "affected", "version": "12.5(1)_SU03_ES03"}, {"status": "affected", "version": "12.5(1)_SU03_ES04"}, {"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "11.6(2)"}, {"status": "affected", "version": "11.6(1)ES01"}, {"status": "affected", "version": "11.6(2)ES06"}, {"status": "affected", "version": "11.6(1)ES02"}, {"status": "affected", "version": "11.6(2)ES01"}, {"status": "affected", "version": "11.6(2)ES03"}, {"status": "affected", "version": "11.6(2)ES07"}, {"status": "affected", "version": "11.6(2)ES08"}, {"status": "affected", "version": "11.6(2)ES02"}, {"status": "affected", "version": "11.6(2)ES05"}, {"status": "affected", "version": "11.6(2)ES04"}]}, {"product": "Cisco Unified Communications Manager IM and Presence Service", "vendor": "Cisco", "versions": [{"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "10.5(2)"}, {"status": "affected", "version": "10.5(2a)"}, {"status": "affected", "version": "10.5(2b)"}, {"status": "affected", "version": "10.5(2)SU3"}, {"status": "affected", "version": "10.5(2)SU2a"}, {"status": "affected", "version": "10.5(2)SU4a"}, {"status": "affected", "version": "10.5(2)SU4"}, {"status": "affected", "version": "10.5(1)SU3"}, {"status": "affected", "version": "10.5(1)SU1"}, {"status": "affected", "version": "10.5(2)SU1"}, {"status": "affected", "version": "10.5(2)SU2"}, {"status": "affected", "version": "10.5(1)SU2"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "11.5(1)SU1"}, {"status": "affected", "version": "11.5(1)SU2"}, {"status": "affected", "version": "11.5(1)SU3"}, {"status": "affected", "version": "11.5(1)SU3a"}, {"status": "affected", "version": "11.5(1)SU4"}, {"status": "affected", "version": "11.5(1)SU5"}, {"status": "affected", "version": "11.5(1)SU5a"}, {"status": "affected", "version": "11.5(1)SU6"}, {"status": "affected", "version": "11.5(1)SU7"}, {"status": "affected", "version": "11.5(1)SU8"}, {"status": "affected", "version": "11.5(1)SU9"}, {"status": "affected", "version": "11.5(1)SU10"}, {"status": "affected", "version": "11.5(1)SU11"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "11.0(1)SU1"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.5(1)SU1"}, {"status": "affected", "version": "12.5(1)SU2"}, {"status": "affected", "version": "12.5(1)SU3"}, {"status": "affected", "version": "12.5(1)SU4"}, {"status": "affected", "version": "12.5(1)SU5"}, {"status": "affected", "version": "12.5(1)SU6"}, {"status": "affected", "version": "12.5(1)SU7"}, {"status": "affected", "version": "14"}, {"status": "affected", "version": "14SU1"}, {"status": "affected", "version": "14SU2"}, {"status": "affected", "version": "14SU2a"}, {"status": "affected", "version": "10.0(1)"}, {"status": "affected", "version": "10.0(1)SU1"}, {"status": "affected", "version": "10.0(1)SU2"}]}, {"product": "Cisco Virtualized Voice Browser", "vendor": "Cisco", "versions": [{"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "11.5(1)ES29"}, {"status": "affected", "version": "11.5(1)ES32"}, {"status": "affected", "version": "11.5(1)_ES43"}, {"status": "affected", "version": "11.5(1)_ES54"}, {"status": "affected", "version": "11.5(1)_ES27"}, {"status": "affected", "version": "11.5(1)ES36"}, {"status": "affected", "version": "11.5(1)_ES32"}, {"status": "affected", "version": "11.5(1)_ES29"}, {"status": "affected", "version": "11.5(1)_ES36"}, {"status": "affected", "version": "11.5(1)ES43"}, {"status": "affected", "version": "11.5(1)_ES53"}, {"status": "affected", "version": "11.5(1)ES27"}, {"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "11.6(1)_ES82"}, {"status": "affected", "version": "11.6(1)_ES22"}, {"status": "affected", "version": "11.6(1)_ES81"}, {"status": "affected", "version": "11.6(1)_ES87"}, {"status": "affected", "version": "11.6(1)_ES84"}, {"status": "affected", "version": "11.6(1)_ES85"}, {"status": "affected", "version": "11.6(1)_ES83"}, {"status": "affected", "version": "11.6(1)_ES80"}, {"status": "affected", "version": "11.6(1)_ES86"}, {"status": "affected", "version": "11.6(1)_ES88"}, {"status": "affected", "version": "12.5(1)_ES04"}, {"status": "affected", "version": "12.5(1)_ES07"}, {"status": "affected", "version": "12.5(1)_ES02"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.5(1)_ES08"}, {"status": "affected", "version": "12.5(1)_ES03"}, {"status": "affected", "version": "12.5(1)_ES06"}, {"status": "affected", "version": "12.5(1)_ES09"}, {"status": "affected", "version": "12.5(1)_ES14"}, {"status": "affected", "version": "12.5(1)SU"}, {"status": "affected", "version": "12.5(1)_ES15"}, {"status": "affected", "version": "12.5(1)_SU"}, {"status": "affected", "version": "12.5(1)_SU_ES01"}, {"status": "affected", "version": "12.5(1)_ES11"}, {"status": "affected", "version": "12.5(1)_ES12"}, {"status": "affected", "version": "12.5(2)_ET"}, {"status": "affected", "version": "12.5(1)_SU_ES02"}, {"status": "affected", "version": "12.5(1)_ES10"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "12.0(1)_ES02"}, {"status": "affected", "version": "12.0(1)_ES01"}, {"status": "affected", "version": "12.0(1)_ES06"}, {"status": "affected", "version": "12.0(1)_ES07"}, {"status": "affected", "version": "12.0(1)_ES05"}, {"status": "affected", "version": "12.0(1)_ES04"}, {"status": "affected", "version": "12.0(1)_ES03"}, {"status": "affected", "version": "12.0(1)_ES08"}, {"status": "affected", "version": "12.6(1)"}, {"status": "affected", "version": "12.6(1)_ES04"}, {"status": "affected", "version": "12.6(1)_ES03"}, {"status": "affected", "version": "12.6(1)_ES09"}, {"status": "affected", "version": "12.6(1)_ES06"}, {"status": "affected", "version": "12.6(1)_ES08"}, {"status": "affected", "version": "12.6(1)_ES05"}, {"status": "affected", "version": "12.6(2)_ES03"}, {"status": "affected", "version": "12.6(1)_ES02"}, {"status": "affected", "version": "12.6(1)_ES01"}, {"status": "affected", "version": "12.6(2)"}, {"status": "affected", "version": "12.6(2)_ET01"}, {"status": "affected", "version": "12.6(2)_ES02"}, {"status": "affected", "version": "12.6(2)_ES01"}, {"status": "affected", "version": "12.6(1)_ES07"}]}, {"product": "Cisco Packaged Contact Center Enterprise", "vendor": "Cisco", "versions": [{"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "10.5(2)"}, {"status": "affected", "version": "10.5(1)_ES7"}, {"status": "affected", "version": "10.5(2)_ES8"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "11.0(2)"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "11.6(1)"}, {"status": "affected", "version": "11.6(2)"}, {"status": "affected", "version": "12.0(1)"}, {"status": "affected", "version": "12.5(1)"}, {"status": "affected", "version": "12.5(2)"}, {"status": "affected", "version": "12.6(1)"}, {"status": "affected", "version": "12.6(2)"}]}, {"product": "Cisco Unified Communications Manager / Cisco Unity Connection", "vendor": "Cisco", "versions": [{"status": "affected", "version": "10.5(2)SU10"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "10.5(1)SU1"}, {"status": "affected", "version": "10.5(1)SU1a"}, {"status": "affected", "version": "10.5(2)"}, {"status": "affected", "version": "10.5(2)SU1"}, {"status": "affected", "version": "10.5(2)SU2"}, {"status": "affected", "version": "10.5(2)SU3"}, {"status": "affected", "version": "10.5(2)SU4"}, {"status": "affected", "version": "10.5(2)SU5"}, {"status": "affected", "version": "10.5(2)SU6"}, {"status": "affected", "version": "10.5(2)SU7"}, {"status": "affected", "version": "10.5(2)SU8"}, {"status": "affected", "version": "10.5(2)SU9"}, {"status": "affected", "version": "10.5(2)SU2a"}, {"status": "affected", "version": "10.5(2)SU3a"}, {"status": "affected", "version": "10.5(2)SU4a"}, {"status": "affected", "version": "10.5(2)SU6a"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "11.0(1a)"}, {"status": "affected", "version": "11.0(1a)SU1"}, {"status": "affected", "version": "11.0(1a)SU2"}, {"status": "affected", "version": "11.0(1a)SU3"}, {"status": "affected", "version": "11.0(1a)SU3a"}, {"status": "affected", "version": "11.0(1a)SU4"}, {"status": "affected", "version": "11.0.1"}, {"status": "affected", "version": "11.0.2"}, {"status": "affected", "version": "11.0.5"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "11.5(1)SU1"}, {"status": "affected", "version": "11.5(1)SU2"}, {"status": "affected", "version": "11.5(1)SU3"}, {"status": "affected", "version": "11.5(1)SU3a"}, {"status": "affected", "version": "11.5(1)SU3b"}, {"status": "affected", "version": "11.5(1)SU4"}, {"status": "affected", "version": "11.5(1)SU5"}, {"status": "affected", "version": "11.5(1)SU6"}, {"status": "affected", "version": "11.5(1)SU7"}, {"status": "affected", "version": "11.5(1)SU8"}, {"status": "affected", "version": "11.5(1)SU9"}, {"status": "affected", "version": "11.5(1)SU10"}, {"status": "affected", "version": "11.5(1)SU11"}, {"status": "affected", "version": "10.0(1)SU2"}, {"status": "affected", "version": "10.0(1)"}, {"status": "affected", "version": "10.0(1)SU1"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*", "matchCriteriaId": "FB3C1282-5EC8-4E46-ADD9-898449D96A22", "versionEndExcluding": "12.5\\(1\\)su8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "312C8052-DA09-4B61-9E90-E9EEE265A4BC", "versionEndExcluding": "14su3", "versionStartIncluding": "14.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*", "matchCriteriaId": "EA4F43B2-1C73-415B-84BF-26D0322FA2C1", "versionEndExcluding": "12.5\\(1\\)su8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*", "matchCriteriaId": "C64C5167-7428-4F9E-B1E9-CAD3236B64AD", "versionEndExcluding": "14su3", "versionStartIncluding": "14.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFF9029D-553F-43FD-8F37-86B11A17EC91", "versionEndExcluding": "12.5\\(1\\)su8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "D09B9BD3-3C31-4816-AD4C-043543C56DB5", "versionEndExcluding": "14.0su3", "versionStartIncluding": "14.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*", "matchCriteriaId": "E2BC7834-136A-4117-BEDC-0C96EC59227B", "versionEndExcluding": "12.5\\(1\\)su8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*", "matchCriteriaId": "06851CA9-B778-4471-BB1D-A2237B225A4C", "versionEndExcluding": "14su3", "versionStartIncluding": "14.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_contact_center_express:12.5\\(1\\):-:*:*:*:*:*:*", "matchCriteriaId": "66E25EE4-AB7B-42BF-A703-0C2E83E83577", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:virtualized_voice_browser:12.5\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "3164D29F-4726-4438-9F31-8644B1C2F0E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:virtualized_voice_browser:12.6\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "7A2BE523-1AAF-4AB5-ACA3-A1E194590B09", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:virtualized_voice_browser:12.6\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "0A7B033E-5B7F-4C11-9C6C-CA4363770A7A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device."}, {"lang": "es", "value": "Una vulnerabilidad en m\u00faltiples productos Cisco Unified Communications y Contact Center Solutions podr\u00eda permitir que un atacante remoto no autenticado ejecute c\u00f3digo arbitrario en un dispositivo afectado. Esta vulnerabilidad se debe al procesamiento inadecuado de los datos proporcionados por el usuario que se leen en la memoria. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando un mensaje manipulado a un puerto de escucha de un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar comandos arbitrarios en el sistema operativo subyacente con los privilegios del usuario de servicios web. Con acceso al sistema operativo subyacente, el atacante tambi\u00e9n podr\u00eda establecer acceso root en el dispositivo afectado."}], "id": "CVE-2024-20253", "lastModified": "2026-06-17T07:06:06.850", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.3, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-20253", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-05-08T15:42:43.844502Z", "version": "2.0.3"}}]}, "published": "2024-01-26T18:15:10.970", "references": [{"source": "psirt@cisco.com", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "psirt@cisco.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-502"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}
CVE record
NVD configurations
Red Hat packages
No data
OpenCVE enrichment
No data
EUVD