CVEvulnerability

CVE-2025-20278

6.7 MEDIUM Published 2025-06-04 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-06-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77

Description

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.

Affected configurations

• cisco finesse 10.5\(1\) • cisco finesse 10.5\(1\) es1 • cisco finesse 10.5\(1\) es2 • cisco finesse 10.5\(1\) es3 • cisco finesse 10.5\(1\) es4 • cisco finesse 10.5\(1\) es5 • cisco finesse 10.5\(1\) es6 • cisco finesse 10.5\(1\) es7 • cisco finesse 10.5\(1\) es8 • cisco finesse 10.5\(1\) es9 • cisco finesse 10.5\(1\) es10 • cisco finesse 11.0\(1\) • cisco finesse 11.5\(1\) • cisco finesse 11.6\(1\) • cisco finesse 11.6\(1\) fips • cisco finesse 12.0\(1\) • cisco finesse 12.5\(1\) • cisco finesse 12.5\(2\) • cisco finesse 12.6\(1\) • cisco finesse 12.6\(2\) • cisco socialminer 10.5\(1\) • cisco socialminer 10.6\(1\) • cisco socialminer 10.6\(2\) • cisco socialminer 11.0\(1\) • cisco socialminer 11.5\(1\) • cisco socialminer 11.5\(1\)su1 • cisco socialminer 11.6\(1\) • cisco socialminer 11.6\(2\) • cisco socialminer 12.0\(1\) • cisco socialminer 12.0\(1\)es02 • cisco socialminer 12.0\(1\)es03 • cisco socialminer 12.0\(1\)es04 • cisco socialminer 12.5\(1\) • cisco socialminer 12.5\(1\)es01 • cisco socialminer 12.5\(1\)su1 • cisco socialminer 12.5\(1\)su2 • cisco socialminer 12.5\(1\)su3 • cisco unified communications manager 12.5\(1\) • cisco unified communications manager 12.5\(1\)su1 • cisco unified communications manager 12.5\(1\)su2 • cisco unified communications manager 12.5\(1\)su3 • cisco unified communications manager 12.5\(1\)su4 • cisco unified communications manager 12.5\(1\)su5 • cisco unified communications manager 12.5\(1\)su6 • cisco unified communications manager 12.5\(1\)su7 • cisco unified communications manager 12.5\(1\)su7a • cisco unified communications manager 12.5\(1\)su8 • cisco unified communications manager 12.5\(1\)su8a • cisco unified communications manager 12.5\(1\)su9 • cisco unified communications manager im and presence service 12.5\(1\) • cisco unified communications manager im and presence service 12.5\(1\)su1 • cisco unified communications manager im and presence service 12.5\(1\)su2 • cisco unified communications manager im and presence service 12.5\(1\)su3 • cisco unified communications manager im and presence service 12.5\(1\)su4 • cisco unified communications manager im and presence service 12.5\(1\)su5 • cisco unified communications manager im and presence service 12.5\(1\)su6 • cisco unified communications manager im and presence service 12.5\(1\)su7 • cisco unified communications manager im and presence service 12.5\(1\)su8 • cisco unified communications manager im and presence service 12.5\(1\)su9 • cisco unified contact center express 8.5\(1\) … and 72 more

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References