{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "cveId": "CVE-2024-20253", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.622Z", "datePublished": "2024-01-26T17:28:30.761Z", "dateUpdated": "2025-05-29T15:12:21.257Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-02-02T15:42:33.881Z" }, "descriptions": [ { "lang": "en", "value": "A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device." } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Unified Contact Center Enterprise", "versions": [ { "version": "N/A", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Unity Connection", "versions": [ { "version": "12.0(1)SU1", "status": "affected" }, { "version": "12.0(1)SU2", "status": "affected" }, { "version": "12.0(1)SU3", "status": "affected" }, { "version": "12.0(1)SU4", "status": "affected" }, { "version": "12.0(1)SU5", "status": "affected" }, { "version": "12.5(1)", "status": "affected" }, { "version": "12.5(1)SU1", "status": "affected" }, { "version": "12.5(1)SU2", "status": "affected" }, { "version": "12.5(1)SU3", "status": "affected" }, { "version": "12.5(1)SU4", "status": "affected" }, { "version": "12.5(1)SU5", "status": "affected" }, { "version": "12.5(1)SU6", "status": "affected" }, { "version": "12.5(1)SU7", "status": "affected" }, { "version": "14", "status": "affected" }, { "version": "14SU1", "status": "affected" }, { "version": "14SU2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Unified Communications Manager", "versions": [ { "version": "12.0(1)SU1", "status": "affected" }, { "version": "12.0(1)SU2", "status": "affected" }, { "version": "12.0(1)SU3", "status": "affected" }, { "version": "12.0(1)SU4", "status": "affected" }, { "version": "12.0(1)SU5", "status": "affected" }, { "version": "12.5(1)", "status": "affected" }, { "version": "12.5(1)SU1", "status": "affected" }, { "version": "12.5(1)SU2", "status": "affected" }, { "version": "12.5(1)SU3", "status": "affected" }, { "version": "12.5(1)SU4", "status": "affected" }, { "version": "12.5(1)SU5", "status": "affected" }, { "version": "12.5(1)SU6", "status": "affected" }, { "version": "12.5(1)SU7", "status": "affected" }, { "version": "12.5(1)SU7a", "status": "affected" }, { "version": "14", "status": "affected" }, { "version": "14SU1", "status": "affected" }, { "version": "14SU2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Unified Contact Center Express", "versions": [ { "version": "8.5(1)", "status": "affected" }, { "version": "9.0(2)SU3ES04", "status": "affected" }, { "version": "10.0(1)SU1", "status": "affected" }, { "version": "10.0(1)SU1ES04", "status": "affected" }, { "version": "10.5(1)", "status": "affected" }, { "version": "10.5(1)SU1", "status": "affected" }, { "version": "10.5(1)SU1ES10", "status": "affected" }, { "version": "10.6(1)", "status": "affected" }, { "version": "10.6(1)SU1", "status": "affected" }, { "version": "10.6(1)SU3", "status": "affected" }, { "version": "10.6(1)SU2", "status": "affected" }, { "version": "10.6(1)SU3ES03", "status": "affected" }, { "version": "10.6(1)SU2ES04", "status": "affected" }, { "version": "10.6(1)SU3ES02", "status": "affected" }, { "version": "10.6(1)SU3ES01", "status": "affected" }, { "version": "11.0(1)SU1", "status": "affected" }, { "version": "11.0(1)SU1ES03", "status": "affected" }, { "version": "11.0(1)SU1ES02", "status": "affected" }, { "version": "11.5(1)SU1", "status": "affected" }, { "version": "11.5(1)SU1ES02", "status": "affected" }, { "version": "11.5(1)SU1ES01", "status": "affected" }, { "version": "11.5(1)SU1ES03", "status": "affected" }, { "version": "11.5(1)ES01", "status": "affected" }, { "version": "12.0(1)", "status": "affected" }, { "version": "12.0(1)ES01", "status": "affected" }, { "version": "12.0(1)ES03", "status": "affected" }, { "version": "12.0(1)ES04", "status": "affected" }, { "version": "12.0(1)ES02", "status": "affected" }, { "version": "12.5(1)", "status": "affected" }, { "version": "12.5(1)SU1", "status": "affected" }, { "version": "12.5(1)SU2", "status": "affected" }, { "version": "12.5(1)SU3", "status": "affected" }, { "version": "12.5(1)_SU01_ES03", "status": "affected" }, { "version": "12.5(1)ES03", "status": "affected" }, { "version": "12.5(1)_SU01_ES01", "status": "affected" }, { "version": "12.5(1)_SU02_ES02", "status": "affected" }, { "version": "12.5(1)_SU01_ES02", "status": "affected" }, { "version": "12.5(1)_SU02_ES03", "status": "affected" }, { "version": "12.5(1)ES01", "status": "affected" }, { "version": "12.5(1)_SU02_ES01", "status": "affected" }, { "version": "12.5(1)ES02", "status": "affected" }, { "version": "12.5(1)_SU03_ES01", "status": "affected" }, { "version": "12.5(1)_SU02_ES04", "status": "affected" }, { "version": "12.5(1)_SU03_ES02", "status": "affected" }, { "version": "12.5(1)_SU03_ES03", "status": "affected" }, { "version": "12.5(1)_SU03_ES04", "status": "affected" }, { "version": "11.6(1)", "status": "affected" }, { "version": "11.6(2)", "status": "affected" }, { "version": "11.6(1)ES01", "status": "affected" }, { "version": "11.6(2)ES06", "status": "affected" }, { "version": "11.6(1)ES02", "status": "affected" }, { "version": "11.6(2)ES01", "status": "affected" }, { "version": "11.6(2)ES03", "status": "affected" }, { "version": "11.6(2)ES07", "status": "affected" }, { "version": "11.6(2)ES08", "status": "affected" }, { "version": "11.6(2)ES02", "status": "affected" }, { "version": "11.6(2)ES05", "status": "affected" }, { "version": "11.6(2)ES04", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Unified Communications Manager IM and Presence Service", "versions": [ { "version": "10.5(1)", "status": "affected" }, { "version": "10.5(2)", "status": "affected" }, { "version": "10.5(2a)", "status": "affected" }, { "version": "10.5(2b)", "status": "affected" }, { "version": "10.5(2)SU3", "status": "affected" }, { "version": "10.5(2)SU2a", "status": "affected" }, { "version": "10.5(2)SU4a", "status": "affected" }, { "version": "10.5(2)SU4", "status": "affected" }, { "version": "10.5(1)SU3", "status": "affected" }, { "version": "10.5(1)SU1", "status": "affected" }, { "version": "10.5(2)SU1", "status": "affected" }, { "version": "10.5(2)SU2", "status": "affected" }, { "version": "10.5(1)SU2", "status": "affected" }, { "version": "11.5(1)", "status": "affected" }, { "version": "11.5(1)SU1", "status": "affected" }, { "version": "11.5(1)SU2", "status": "affected" }, { "version": "11.5(1)SU3", "status": "affected" }, { "version": "11.5(1)SU3a", "status": "affected" }, { "version": "11.5(1)SU4", "status": "affected" }, { "version": "11.5(1)SU5", "status": "affected" }, { "version": "11.5(1)SU5a", "status": "affected" }, { "version": "11.5(1)SU6", "status": "affected" }, { "version": "11.5(1)SU7", "status": "affected" }, { "version": "11.5(1)SU8", "status": "affected" }, { "version": "11.5(1)SU9", "status": "affected" }, { "version": "11.5(1)SU10", "status": "affected" }, { "version": "11.5(1)SU11", "status": "affected" }, { "version": "11.0(1)", "status": "affected" }, { "version": "11.0(1)SU1", "status": "affected" }, { "version": "12.5(1)", "status": "affected" }, { "version": "12.5(1)SU1", "status": "affected" }, { "version": "12.5(1)SU2", "status": "affected" }, { "version": "12.5(1)SU3", "status": "affected" }, { "version": "12.5(1)SU4", "status": "affected" }, { "version": "12.5(1)SU5", "status": "affected" }, { "version": "12.5(1)SU6", "status": "affected" }, { "version": "12.5(1)SU7", "status": "affected" }, { "version": "14", "status": "affected" }, { "version": "14SU1", "status": "affected" }, { "version": "14SU2", "status": "affected" }, { "version": "14SU2a", "status": "affected" }, { "version": "10.0(1)", "status": "affected" }, { "version": "10.0(1)SU1", "status": "affected" }, { "version": "10.0(1)SU2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Virtualized Voice Browser", "versions": [ { "version": "11.0(1)", "status": "affected" }, { "version": "11.5(1)", "status": "affected" }, { "version": "11.5(1)ES29", "status": "affected" }, { "version": "11.5(1)ES32", "status": "affected" }, { "version": "11.5(1)_ES43", "status": "affected" }, { "version": "11.5(1)_ES54", "status": "affected" }, { "version": "11.5(1)_ES27", "status": "affected" }, { "version": "11.5(1)ES36", "status": "affected" }, { "version": "11.5(1)_ES32", "status": "affected" }, { "version": "11.5(1)_ES29", "status": "affected" }, { "version": "11.5(1)_ES36", "status": "affected" }, { "version": "11.5(1)ES43", "status": "affected" }, { "version": "11.5(1)_ES53", "status": "affected" }, { "version": "11.5(1)ES27", "status": "affected" }, { "version": "11.6(1)", "status": "affected" }, { "version": "11.6(1)_ES82", "status": "affected" }, { "version": "11.6(1)_ES22", "status": "affected" }, { "version": "11.6(1)_ES81", "status": "affected" }, { "version": "11.6(1)_ES87", "status": "affected" }, { "version": "11.6(1)_ES84", "status": "affected" }, { "version": "11.6(1)_ES85", "status": "affected" }, { "version": "11.6(1)_ES83", "status": "affected" }, { "version": "11.6(1)_ES80", "status": "affected" }, { "version": "11.6(1)_ES86", "status": "affected" }, { "version": "11.6(1)_ES88", "status": "affected" }, { "version": "12.5(1)_ES04", "status": "affected" }, { "version": "12.5(1)_ES07", "status": "affected" }, { "version": "12.5(1)_ES02", "status": "affected" }, { "version": "12.5(1)", "status": "affected" }, { "version": "12.5(1)_ES08", "status": "affected" }, { "version": "12.5(1)_ES03", "status": "affected" }, { "version": "12.5(1)_ES06", "status": "affected" }, { "version": "12.5(1)_ES09", "status": "affected" }, { "version": "12.5(1)_ES14", "status": "affected" }, { "version": "12.5(1)SU", "status": "affected" }, { "version": "12.5(1)_ES15", "status": "affected" }, { "version": "12.5(1)_SU", "status": "affected" }, { "version": "12.5(1)_SU_ES01", "status": "affected" }, { "version": "12.5(1)_ES11", "status": "affected" }, { "version": "12.5(1)_ES12", "status": "affected" }, { "version": "12.5(2)_ET", "status": "affected" }, { "version": "12.5(1)_SU_ES02", "status": "affected" }, { "version": "12.5(1)_ES10", "status": "affected" }, { "version": "12.0(1)", "status": "affected" }, { "version": "12.0(1)_ES02", "status": "affected" }, { "version": "12.0(1)_ES01", "status": "affected" }, { "version": "12.0(1)_ES06", "status": "affected" }, { "version": "12.0(1)_ES07", "status": "affected" }, { "version": "12.0(1)_ES05", "status": "affected" }, { "version": "12.0(1)_ES04", "status": "affected" }, { "version": "12.0(1)_ES03", "status": "affected" }, { "version": "12.0(1)_ES08", "status": "affected" }, { "version": "12.6(1)", "status": "affected" }, { "version": "12.6(1)_ES04", "status": "affected" }, { "version": "12.6(1)_ES03", "status": "affected" }, { "version": "12.6(1)_ES09", "status": "affected" }, { "version": "12.6(1)_ES06", "status": "affected" }, { "version": "12.6(1)_ES08", "status": "affected" }, { "version": "12.6(1)_ES05", "status": "affected" }, { "version": "12.6(2)_ES03", "status": "affected" }, { "version": "12.6(1)_ES02", "status": "affected" }, { "version": "12.6(1)_ES01", "status": "affected" }, { "version": "12.6(2)", "status": "affected" }, { "version": "12.6(2)_ET01", "status": "affected" }, { "version": "12.6(2)_ES02", "status": "affected" }, { "version": "12.6(2)_ES01", "status": "affected" }, { "version": "12.6(1)_ES07", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Packaged Contact Center Enterprise", "versions": [ { "version": "10.5(1)", "status": "affected" }, { "version": "10.5(2)", "status": "affected" }, { "version": "10.5(1)_ES7", "status": "affected" }, { "version": "10.5(2)_ES8", "status": "affected" }, { "version": "11.0(1)", "status": "affected" }, { "version": "11.0(2)", "status": "affected" }, { "version": "11.5(1)", "status": "affected" }, { "version": "11.6(1)", "status": "affected" }, { "version": "11.6(2)", "status": "affected" }, { "version": "12.0(1)", "status": "affected" }, { "version": "12.5(1)", "status": "affected" }, { "version": "12.5(2)", "status": "affected" }, { "version": "12.6(1)", "status": "affected" }, { "version": "12.6(2)", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Unified Communications Manager / Cisco Unity Connection", "versions": [ { "version": "10.5(2)SU10", "status": "affected" }, { "version": "10.5(1)", "status": "affected" }, { "version": "10.5(1)SU1", "status": "affected" }, { "version": "10.5(1)SU1a", "status": "affected" }, { "version": "10.5(2)", "status": "affected" }, { "version": "10.5(2)SU1", "status": "affected" }, { "version": "10.5(2)SU2", "status": "affected" }, { "version": "10.5(2)SU3", "status": "affected" }, { "version": "10.5(2)SU4", "status": "affected" }, { "version": "10.5(2)SU5", "status": "affected" }, { "version": "10.5(2)SU6", "status": "affected" }, { "version": "10.5(2)SU7", "status": "affected" }, { "version": "10.5(2)SU8", "status": "affected" }, { "version": "10.5(2)SU9", "status": "affected" }, { "version": "10.5(2)SU2a", "status": "affected" }, { "version": "10.5(2)SU3a", "status": "affected" }, { "version": "10.5(2)SU4a", "status": "affected" }, { "version": "10.5(2)SU6a", "status": "affected" }, { "version": "11.0(1)", "status": "affected" }, { "version": "11.0(1a)", "status": "affected" }, { "version": "11.0(1a)SU1", "status": "affected" }, { "version": "11.0(1a)SU2", "status": "affected" }, { "version": "11.0(1a)SU3", "status": "affected" }, { "version": "11.0(1a)SU3a", "status": "affected" }, { "version": "11.0(1a)SU4", "status": "affected" }, { "version": "11.0.1", "status": "affected" }, { "version": "11.0.2", "status": "affected" }, { "version": "11.0.5", "status": "affected" }, { "version": "11.5(1)", "status": "affected" }, { "version": "11.5(1)SU1", "status": "affected" }, { "version": "11.5(1)SU2", "status": "affected" }, { "version": "11.5(1)SU3", "status": "affected" }, { "version": "11.5(1)SU3a", "status": "affected" }, { "version": "11.5(1)SU3b", "status": "affected" }, { "version": "11.5(1)SU4", "status": "affected" }, { "version": "11.5(1)SU5", "status": "affected" }, { "version": "11.5(1)SU6", "status": "affected" }, { "version": "11.5(1)SU7", "status": "affected" }, { "version": "11.5(1)SU8", "status": "affected" }, { "version": "11.5(1)SU9", "status": "affected" }, { "version": "11.5(1)SU10", "status": "affected" }, { "version": "11.5(1)SU11", "status": "affected" }, { "version": "10.0(1)SU2", "status": "affected" }, { "version": "10.0(1)", "status": "affected" }, { "version": "10.0(1)SU1", "status": "affected" } ] } ], "problemTypes": [ { "descriptions": [ { "lang": "en", "description": "Deserialization of Untrusted Data", "type": "cwe", "cweId": "CWE-502" } ] } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm", "name": "cisco-sa-cucm-rce-bWNzQcUm" } ], "metrics": [ { "format": "cvssV3_1", "cvssV3_1": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H", "baseScore": 9.9, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } } ], "exploits": [ { "lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory." } ], "source": { "advisory": "cisco-sa-cucm-rce-bWNzQcUm", "discovery": "EXTERNAL", "defects": [ "CSCwe18830", "CSCwe18773", "CSCwe18840", "CSCwd64292", "CSCwd64245", "CSCwd64276" ] } }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:52:31.560Z" }, "title": "CVE Program Container", "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm", "name": "cisco-sa-cucm-rce-bWNzQcUm", "tags": [ "x_transferred" ] } ] }, { "problemTypes": [ { "descriptions": [ { "type": "CWE", "cweId": "CWE-502", "lang": "en", "description": "CWE-502 Deserialization of Untrusted Data" } ] } ], "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2025-05-08T15:42:43.844502Z", "id": "CVE-2024-20253", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-29T15:12:21.257Z" } } ] } }