Cisco Unified Communications Products Remote Code Execution Vulnerability
A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-20045US | critical9.8OT kritisch | KEV | ||
A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- CSCwr21851external
- CSCwr29208external
- CSCwr29216external
- Cisco Unified Communications Products Remote Code Execution Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- fixed software releaseexternal
- ciscocm.CSCwr21851_Remote_Code_Execution_v1.zipexternal
Behebungen (34)
- Behoben12.5(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU7a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU8a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5(1)SU9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14SU2a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14SU3a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14SU4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14SU4a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1.13010-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1.13011-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1.13012-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1.13013-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1.13014-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1.13015-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1.13016-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1.13017-1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15SU1a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15SU3a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan