Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-20112

Cisco Unified Communications Products Privilege Escalation Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to escape the restricted shell and gain root privileges on the underlying operating system of an affected device. To successfully exploit this vulnerability, an attacker would need administrative access to the ESXi hypervisor.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Emergency Responder

Default version status: unknown

  • 12.5(1a)affected
  • 12.5(1)SU1affected
  • 12.5(1)affected
  • 12.5(1)SU2affected
  • 12.5(1)SU3affected
  • 12.5(1)SU4affected
  • 14affected
  • 12.5(1)SU5affected
  • 14SU1affected
  • 12.5(1)SU6affected
  • 14SU2affected
  • 12.5(1)SU7affected
  • 14SU3affected
  • 12.5(1)SU8affected
  • 12.5(1)SU8aaffected
  • 12.5(1)SU8baffected
  • 14SU3aaffected
  • 15affected
  • 15SU1affected
  • 15SU1aaffected
  • 14SU4affected
  • 12.5(1)SU9affected

Cisco Cisco Finesse

Default version status: unknown

  • 11.0(1)ES_Rollbackaffected
  • 10.5(1)ES4affected
  • 11.6(1)ES3affected
  • 11.0(1)ES2affected
  • 12.0(1)ES2affected
  • 10.5(1)ES3affected
  • 11.0(1)affected
  • 11.6(1)FIPSaffected
  • 11.6(1)ES4affected
  • 11.0(1)ES3affected
  • 10.5(1)ES6affected
  • 11.0(1)ES7affected
  • 11.5(1)ES4affected
  • 10.5(1)ES8affected
  • 11.5(1)affected
  • 11.6(1)affected
  • 10.5(1)ES10affected
  • 11.6(1)ES2affected
  • 11.6(1)ESaffected
  • 11.0(1)ES6affected
  • 11.0(1)ES4affected
  • 12.0(1)affected
  • 11.6(1)ES7affected
  • 10.5(1)ES7affected
  • 11.6(1)ES8affected
  • 11.5(1)ES1affected
  • 11.6(1)ES1affected
  • 11.5(1)ES5affected
  • 11.0(1)ES1affected
  • 10.5(1)affected
  • 11.6(1)ES6affected
  • 10.5(1)ES2affected
  • 12.0(1)ES1affected
  • 11.0(1)ES5affected
  • 10.5(1)ES5affected
  • 11.5(1)ES3affected
  • 11.5(1)ES2affected
  • 10.5(1)ES9affected
  • 11.6(1)ES5affected
  • 11.6(1)ES9affected
  • 11.5(1)ES6affected
  • 10.5(1)ES1affected
  • 12.5(1)affected
  • 12.0(1)ES3affected
  • 11.6(1)ES10affected
  • 12.5(1)ES1affected
  • 12.5(1)ES2affected
  • 12.0(1)ES4affected
  • 12.5(1)ES3affected
  • 12.0(1)ES5affected
  • 12.5(1)ES4affected
  • 12.0(1)ES6affected
  • 12.5(1)ES5affected
  • 12.5(1)ES6affected
  • 12.0(1)ES7affected
  • 12.6(1)affected
  • 12.5(1)ES7affected
  • 11.6(1)ES11affected
  • 12.6(1)ES1affected
  • 12.0(1)ES8affected
  • 12.5(1)ES8affected
  • 12.6(1)ES2affected
  • 12.6(1)ES3affected
  • 12.6(1)ES4affected
  • 12.6(1)ES5affected
  • 12.5(2)affected
  • 12.5(1)_SUaffected
  • 12.5(1)SUaffected
  • 12.6(1)ES6affected
  • 12.5(1)SU ES1affected
  • 12.6(1)ES7affected
  • 12.6(1)ES7_ETaffected
  • 12.6(2)affected
  • 12.6(1)ES8affected
  • 12.6(1)ES9affected
  • 12.6(2)ES1affected
  • 12.6(1)ES10affected
  • 12.5(1)SU ES2affected
  • 12.6(1)ES11affected
  • 12.6(2)ES2affected
  • 12.6(2)ES3affected
  • 12.5(1)SU ES3affected
  • 12.6(2)ES4affected
  • 12.6(2)ES6affected

Cisco Cisco Prime Collaboration Deployment

Default version status: unknown

  • 11.5(1)affected
  • 11.0(1a)affected
  • 11.5(1)SU1affected
  • 10.5(3)affected
  • 12.6(1)affected
  • 11.0(1)affected
  • 11.6(2)affected
  • 12.1(1)affected
  • 12.0(1a)affected
  • 11.5(3)affected
  • 10.5(1)affected
  • 12.5(1)affected
  • 11.5(2)affected
  • 11.6(1)affected
  • 10.5(2)affected
  • 10.5(3)SU1affected
  • 14affected
  • 14SU1affected
  • 14SU2affected
  • 14SU3affected
  • 15affected
  • 15SU1affected
  • 14SU4affected

Cisco Cisco SocialMiner

Default version status: unknown

  • 12.5(1)ES01affected
  • 10.5(1)affected
  • 11.6(1)affected
  • 10.6(1)affected
  • 12.0(1)ES04affected
  • 10.6(2)affected
  • 12.5(1)affected
  • 11.6(2)affected
  • 12.0(1)affected
  • 12.0(1)ES02affected
  • 11.0(1)affected
  • 11.5(1)affected
  • 11.5(1)SU1affected
  • 12.0(1)ES03affected
  • 12.5(1)SU3affected
  • 12.5(1)SU1affected
  • 12.5(1)SU2affected

Cisco Cisco Unified Communications Manager

Default version status: unknown

  • 12.5(1)SU2affected
  • 12.5(1)SU1affected
  • 12.5(1)affected
  • 12.5(1)SU3affected
  • 12.5(1)SU4affected
  • 14affected
  • 12.5(1)SU5affected
  • 14SU1affected
  • 12.5(1)SU6affected
  • 14SU2affected
  • 12.5(1)SU7affected
  • 12.5(1)SU7aaffected
  • 14SU3affected
  • 12.5(1)SU8affected
  • 12.5(1)SU8aaffected
  • 15affected
  • 15SU1affected
  • 14SU4affected
  • 14SU4aaffected
  • 15SU1aaffected
  • 12.5(1)SU9affected

Cisco Cisco Unified Communications Manager IM and Presence Service

Default version status: unknown

  • 12.5(1)affected
  • 12.5(1)SU1affected
  • 12.5(1)SU2affected
  • 12.5(1)SU3affected
  • 12.5(1)SU4affected
  • 14affected
  • 12.5(1)SU5affected
  • 14SU1affected
  • 12.5(1)SU6affected
  • 14SU2affected
  • 14SU2aaffected
  • 12.5(1)SU7affected
  • 14SU3affected
  • 12.5(1)SU8affected
  • 15affected
  • 15SU1affected
  • 14SU4affected
  • 12.5(1)SU9affected

Cisco Cisco Unified Contact Center Express

Default version status: unknown

  • 10.5(1)SU1affected
  • 10.6(1)affected
  • 11.6(1)affected
  • 10.6(1)SU1affected
  • 10.6(1)SU3affected
  • 11.6(2)affected
  • 12.0(1)affected
  • 10.0(1)SU1affected
  • 11.0(1)SU1affected
  • 11.5(1)SU1affected
  • 10.5(1)affected
  • 12.5(1)affected
  • 12.5(1)SU1affected
  • 12.5(1)SU2affected
  • 12.5(1)SU3affected
  • 12.5(1)_SU03_ES01affected
  • 12.5(1)_SU03_ES02affected
  • 12.5(1)_SU02_ES03affected
  • 12.5(1)_SU02_ES04affected
  • 12.5(1)_SU02_ES02affected
  • 12.5(1)_SU01_ES02affected
  • 12.5(1)_SU01_ES03affected
  • 12.5(1)_SU02_ES01affected
  • 11.6(2)ES07affected
  • 11.6(2)ES08affected
  • 12.5(1)_SU01_ES01affected
  • 12.0(1)ES04affected
  • 12.5(1)ES02affected
  • 12.5(1)ES03affected
  • 11.6(2)ES06affected
  • 12.5(1)ES01affected
  • 12.0(1)ES03affected
  • 12.0(1)ES01affected
  • 11.6(2)ES05affected
  • 12.0(1)ES02affected
  • 11.6(2)ES04affected
  • 11.6(2)ES03affected
  • 11.6(2)ES02affected
  • 11.6(2)ES01affected
  • 10.6(1)SU3ES03affected
  • 11.0(1)SU1ES03affected
  • 10.6(1)SU3ES01affected
  • 10.5(1)SU1ES10affected
  • 10.0(1)SU1ES04affected
  • 11.5(1)SU1ES03affected
  • 11.6(1)ES02affected
  • 11.5(1)ES01affected
  • 9.0(2)SU3ES04affected
  • 10.6(1)SU2affected
  • 10.6(1)SU2ES04affected
  • 11.6(1)ES01affected
  • 10.6(1)SU3ES02affected
  • 11.5(1)SU1ES02affected
  • 11.5(1)SU1ES01affected
  • 8.5(1)SU4ES09affected
  • 8.5(1)affected
  • 11.0(1)SU1ES02affected
  • 12.5(1)_SU03_ES03affected
  • 12.5(1)_SU03_ES04affected
  • 12.5(1)_SU03_ES05affected
  • 12.5(1)_SU03_ES06affected

Cisco Cisco Unified Intelligence Center

Default version status: unknown

  • 11.6(1)affected
  • 10.5(1)affected
  • 11.0(1)affected
  • 11.5(1)affected
  • 12.0(1)affected
  • 12.5(1)affected
  • 11.0(2)affected
  • 12.6(1)affected
  • 12.5(1)SUaffected
  • 12.6(1)_ETaffected
  • 12.6(1)_ES05_ETaffected
  • 11.0(3)affected
  • 12.6(2)affected
  • 12.6(2)_504_Issue_ETaffected
  • 12.6.1_ExcelIssue_ETaffected
  • 12.6(2)_Permalink_ETaffected
  • 12.6.2_CSCwk19536_ETaffected
  • 12.6.2_CSCwm96922_ETaffected
  • 12.6.2_Amq_OOS_ETaffected
  • 12.5(2)ET_CSCwi79933affected
  • 12.6(2)_ETaffected
  • 12.6.2_CSCwn48501_ETaffected

Cisco Cisco Unity Connection

Default version status: unknown

  • 12.5(1)affected
  • 12.5(1)SU1affected
  • 12.5(1)SU2affected
  • 12.5(1)SU3affected
  • 12.5(1)SU4affected
  • 14affected
  • 12.5(1)SU5affected
  • 14SU1affected
  • 12.5(1)SU6affected
  • 14SU2affected
  • 12.5(1)SU7affected
  • 14SU3affected
  • 12.5(1)SU8affected
  • 14SU3aaffected
  • 12.5(1)SU8aaffected
  • 15affected
  • 15SU1affected
  • 14SU4affected
  • 12.5(1)SU9affected

Cisco Cisco Virtualized Voice Browser

Default version status: unknown

  • 11.0(1)affected
  • 11.6(1)_ES84affected
  • 11.5(1)_ES54affected
  • 11.5(1)_ES27affected
  • 11.5(1)affected
  • 11.5(1)ES36affected
  • 12.0(1)_ES01affected
  • 11.6(1)_ES85affected
  • 12.5(1)_ES05affected
  • 11.5(1)_ES32affected
  • 11.6(1)_ES83affected
  • 11.5(1)_ES29affected
  • 12.0(1)_ES06affected
  • 12.5(1)affected
  • 12.0(1)_ES07affected
  • 11.6(1)_ES80affected
  • 12.0(1)_ES05affected
  • 11.5(1)_ES36affected
  • 11.5(1)_ES53affected
  • 12.5(1)_ES08affected
  • 11.5(1)ES43affected
  • 12.0(1)_ES03affected
  • 11.6(1)_ES86affected
  • 12.0(1)_ES04affected
  • 11.5(1)ES27affected
  • 12.5(1)_ES03affected
  • 11.6(1)_ES88affected
  • 12.5(1)_ES06affected
  • 11.6(1)_ES82affected
  • 11.6(1)affected
  • 11.5(1)ES29affected
  • 12.5(1)_ES04affected
  • 12.5(1)_ES07affected
  • 11.6(1)_ES87affected
  • 11.6(1)_ES81affected
  • 12.0(1)affected
  • 11.6(1)_ES22affected
  • 11.5(1)_ES43affected
  • 11.5(1)ES32affected
  • 12.0(1)_ES02affected
  • 12.5(1)_ES02affected
  • 12.6(1)affected
  • 12.5(1)_ES09affected
  • 12.6(1)_ES01affected
  • 12.0(1)_ES08affected
  • 12.5(1)_ES10affected
  • 12.6(1)_ES02affected
  • 12.5(1)_ES11affected
  • 12.5(1)_ES12affected
  • 12.6(1)_ES03affected
  • 12.5(1)_ES13affected
  • 12.5(1)_ES14affected
  • 12.6(1)_ES04affected
  • 12.6(1)_ES05affected
  • 12.5(1)_ES15affected
  • 12.6(1)_ES06affected
  • 12.6(1)_ETaffected
  • 12.5(1)_ES16affected
  • 12.5(1)SUaffected
  • 12.5(1)_SUaffected
  • 12.5(1)_SU_ES01affected
  • 12.6(1)_ES07affected
  • 12.6(2)affected
  • 12.5(1)_ES17affected
  • 12.6(1)_ES08affected
  • 12.6(1)_ES09affected
  • 12.6(1)_ES10affected
  • 12.5(1)_SU_ES02affected
  • 12.6(2)_ES01affected
  • 12.6(2)_ET01affected
  • 12.5(2)_ETaffected
  • 12.6(2)_ES02affected
  • 12.6(2)_ET_Streamingaffected
  • 12.6(2)ET_Transcribeaffected
  • 12.6(2)_ES03affected
  • 12.6(2)ET_NuanceMixaffected
  • 12.6(2)ET_FileUploadaffected
  • 12.6(2)_ET02affected
  • 12.6(2)_ES04affected
  • 12.6.2ET_RTPfallbackaffected
  • 12.6.2ET_CSCwf55306affected
  • 12.6.2_ET_CSCwj36712affected
  • 12.5.2 ET-CSCwj33374affected
  • 12.5(1) SU ETaffected
  • 12.6(2)ET_CSCwj87296affected
  • 12.6(2)_ES05affected
  • 12.5.2_ET_CSCvz27014affected
  • 12.6(2)_ETaffected
  • 12.6.2-ETaffected
  • 12.6(2)ET_CSCwk83135affected
  • 12.6.2_ET_CX_ALAWaffected
  • 12.6.2-ET01-SSLaffected
  • 12.6(2)_ES06affected

References