CVEvulnerability
CVE-2025-20278
6.7 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-77
Description
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user.
This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.
Affected configurations
• cisco finesse 10.5\(1\)
• cisco finesse 10.5\(1\) es1
• cisco finesse 10.5\(1\) es2
• cisco finesse 10.5\(1\) es3
• cisco finesse 10.5\(1\) es4
• cisco finesse 10.5\(1\) es5
• cisco finesse 10.5\(1\) es6
• cisco finesse 10.5\(1\) es7
• cisco finesse 10.5\(1\) es8
• cisco finesse 10.5\(1\) es9
• cisco finesse 10.5\(1\) es10
• cisco finesse 11.0\(1\)
• cisco finesse 11.5\(1\)
• cisco finesse 11.6\(1\)
• cisco finesse 11.6\(1\) fips
• cisco finesse 12.0\(1\)
• cisco finesse 12.5\(1\)
• cisco finesse 12.5\(2\)
• cisco finesse 12.6\(1\)
• cisco finesse 12.6\(2\)
• cisco socialminer 10.5\(1\)
• cisco socialminer 10.6\(1\)
• cisco socialminer 10.6\(2\)
• cisco socialminer 11.0\(1\)
• cisco socialminer 11.5\(1\)
• cisco socialminer 11.5\(1\)su1
• cisco socialminer 11.6\(1\)
• cisco socialminer 11.6\(2\)
• cisco socialminer 12.0\(1\)
• cisco socialminer 12.0\(1\)es02
• cisco socialminer 12.0\(1\)es03
• cisco socialminer 12.0\(1\)es04
• cisco socialminer 12.5\(1\)
• cisco socialminer 12.5\(1\)es01
• cisco socialminer 12.5\(1\)su1
• cisco socialminer 12.5\(1\)su2
• cisco socialminer 12.5\(1\)su3
• cisco unified communications manager 12.5\(1\)
• cisco unified communications manager 12.5\(1\)su1
• cisco unified communications manager 12.5\(1\)su2
• cisco unified communications manager 12.5\(1\)su3
• cisco unified communications manager 12.5\(1\)su4
• cisco unified communications manager 12.5\(1\)su5
• cisco unified communications manager 12.5\(1\)su6
• cisco unified communications manager 12.5\(1\)su7
• cisco unified communications manager 12.5\(1\)su7a
• cisco unified communications manager 12.5\(1\)su8
• cisco unified communications manager 12.5\(1\)su8a
• cisco unified communications manager 12.5\(1\)su9
• cisco unified communications manager im and presence service 12.5\(1\)
• cisco unified communications manager im and presence service 12.5\(1\)su1
• cisco unified communications manager im and presence service 12.5\(1\)su2
• cisco unified communications manager im and presence service 12.5\(1\)su3
• cisco unified communications manager im and presence service 12.5\(1\)su4
• cisco unified communications manager im and presence service 12.5\(1\)su5
• cisco unified communications manager im and presence service 12.5\(1\)su6
• cisco unified communications manager im and presence service 12.5\(1\)su7
• cisco unified communications manager im and presence service 12.5\(1\)su8
• cisco unified communications manager im and presence service 12.5\(1\)su9
• cisco unified contact center express 8.5\(1\)
… and 72 more
Related
Weakness · CWE (1)
- CWE-77 Improper Neutralization of Special Elements used in a Command weakness