A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user.
This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Finesse
Vendor
Cisco
Product
Cisco Finesse
Platforms
Unknown
Default status
unknown
Cisco Finesse · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.0(1)ES_Rollback
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES4
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES3
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)ES2
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES2
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES3
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)FIPS
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES4
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)ES3
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES6
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)ES7
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)ES4
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES8
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES10
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES2
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)ES6
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)ES4
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES7
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES7
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES8
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)ES1
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES1
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)ES5
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)ES1
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES6
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES2
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES1
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)ES5
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES5
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)ES3
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)ES2
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES9
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES5
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES9
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)ES6
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)ES1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES3
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES10
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES2
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES4
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES3
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES5
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES4
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES6
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES5
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES6
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES7
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES7
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES11
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES1
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES8
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES8
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES2
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES3
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES4
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES5
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(2)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES6
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU ES1
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES7
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES7_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES8
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES9
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)ES1
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES10
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU ES2
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)ES11
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)ES2
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)ES3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU ES3
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)ES4
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)ES5
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco SocialMiner
Vendor
Cisco
Product
Cisco SocialMiner
Platforms
Unknown
Default status
unknown
Cisco SocialMiner · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
12.5(1)ES01
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES04
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(2)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES02
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES03
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU2
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Unified Communications Manager
Vendor
Cisco
Product
Cisco Unified Communications Manager
Platforms
Unknown
Default status
unknown
Cisco Unified Communications Manager · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
12.5(1)SU2
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU4
affected
Unavailable
Unavailable
Unavailable
None listed
14
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU5
affected
Unavailable
Unavailable
Unavailable
None listed
14SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU6
affected
Unavailable
Unavailable
Unavailable
None listed
14SU2
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU7
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU7a
affected
Unavailable
Unavailable
Unavailable
None listed
14SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU8
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU8a
affected
Unavailable
Unavailable
Unavailable
None listed
15
affected
Unavailable
Unavailable
Unavailable
None listed
15SU1
affected
Unavailable
Unavailable
Unavailable
None listed
14SU4
affected
Unavailable
Unavailable
Unavailable
None listed
14SU4a
affected
Unavailable
Unavailable
Unavailable
None listed
15SU1a
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU9
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Unified Communications Manager IM and Presence Service
Vendor
Cisco
Product
Cisco Unified Communications Manager IM and Presence Service
Platforms
Unknown
Default status
unknown
Cisco Unified Communications Manager IM and Presence Service · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
12.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU2
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU4
affected
Unavailable
Unavailable
Unavailable
None listed
14
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU5
affected
Unavailable
Unavailable
Unavailable
None listed
14SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU6
affected
Unavailable
Unavailable
Unavailable
None listed
14SU2
affected
Unavailable
Unavailable
Unavailable
None listed
14SU2a
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU7
affected
Unavailable
Unavailable
Unavailable
None listed
14SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU8
affected
Unavailable
Unavailable
Unavailable
None listed
15
affected
Unavailable
Unavailable
Unavailable
None listed
Recovery ISO
affected
Unavailable
Unavailable
Unavailable
None listed
15SU1
affected
Unavailable
Unavailable
Unavailable
None listed
14SU4
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU9
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Unified Contact Center Express
Vendor
Cisco
Product
Cisco Unified Contact Center Express
Platforms
Unknown
Default status
unknown
Cisco Unified Contact Center Express · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.6(1)
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(1)SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)
affected
Unavailable
Unavailable
Unavailable
None listed
10.0(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU2
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU03_ES01
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU03_ES02
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU02_ES03
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU02_ES04
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU02_ES02
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU01_ES02
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU01_ES03
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU02_ES01
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)ES07
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)ES08
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU01_ES01
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES04
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES02
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES03
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)ES06
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)ES01
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES03
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES01
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)ES05
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)ES02
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)ES04
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)ES03
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)ES02
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(2)ES01
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(1)SU3ES03
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)SU1ES03
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(1)SU3ES01
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)SU1ES10
affected
Unavailable
Unavailable
Unavailable
None listed
10.0(1)SU1ES04
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)SU1ES03
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES02
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)ES01
affected
Unavailable
Unavailable
Unavailable
None listed
9.0(2)SU3ES04
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(1)SU2
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(1)SU2ES04
affected
Unavailable
Unavailable
Unavailable
None listed
11.6(1)ES01
affected
Unavailable
Unavailable
Unavailable
None listed
10.6(1)SU3ES02
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)SU1ES02
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)SU1ES01
affected
Unavailable
Unavailable
Unavailable
None listed
8.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)SU1ES02
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU03_ES03
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU03_ES04
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU03_ES05
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)_SU03_ES06
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Unified Intelligence Center
Vendor
Cisco
Product
Cisco Unified Intelligence Center
Platforms
Unknown
Default status
unknown
Cisco Unified Intelligence Center · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.6(1)
affected
Unavailable
Unavailable
Unavailable
None listed
10.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.0(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(2)
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(1)_ES05_ET
affected
Unavailable
Unavailable
Unavailable
None listed
11.0(3)
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)_504_Issue_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.6.1_ExcelIssue_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)_Permalink_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.6.2_CSCwk19536_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.6.2_CSCwm96922_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.6.2_Amq_OOS_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(2)ET_CSCwi79933
affected
Unavailable
Unavailable
Unavailable
None listed
12.6(2)_ET
affected
Unavailable
Unavailable
Unavailable
None listed
12.6.2_CSCwn48501_ET
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Unity Connection
Vendor
Cisco
Product
Cisco Unity Connection
Platforms
Unknown
Default status
unknown
Cisco Unity Connection · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
12.5(1)
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU2
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU4
affected
Unavailable
Unavailable
Unavailable
None listed
14
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU5
affected
Unavailable
Unavailable
Unavailable
None listed
14SU1
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU6
affected
Unavailable
Unavailable
Unavailable
None listed
14SU2
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU7
affected
Unavailable
Unavailable
Unavailable
None listed
14SU3
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU8
affected
Unavailable
Unavailable
Unavailable
None listed
14SU3a
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU8a
affected
Unavailable
Unavailable
Unavailable
None listed
15
affected
Unavailable
Unavailable
Unavailable
None listed
15SU1
affected
Unavailable
Unavailable
Unavailable
None listed
14SU4
affected
Unavailable
Unavailable
Unavailable
None listed
12.5(1)SU9
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Virtualized Voice Browser
Vendor
Cisco
Product
Cisco Virtualized Voice Browser
Platforms
Unknown
Default status
unknown
Cisco Virtualized Voice Browser · Scoped product and version facts