Cisco Unified Communications Products Command Injection Vulnerability (Cisco Cisco Finesse)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.19 % · percentile 8 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Analyzed
Description
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.
Weaknesses (CWE)
- CWE-77 — Improper Neutralization of Special Elements used in a Command
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.0 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N | cisco |
| CVSS 3.1 | MEDIUM 6.0 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N | NVD · psirt@cisco.com (Secondary) |
| CVSS 3.1 | MEDIUM 6.7 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2025-16884
- GCVE · GCVE-0-2025-20278
Affected configurations (NVD CPE)
cpe:2.3:a:cisco:finesse:10.5\(1\):*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es1:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es2:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es3:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es4:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es5:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es6:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es7:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es8:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es9:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:10.5\(1\)_es10:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.0\(1\):-:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.0\(1\):es1:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.0\(1\):es2:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.0\(1\):es3:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.0\(1\):es4:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.0\(1\):es5:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.0\(1\):es6:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.0\(1\):es7:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.5\(1\):-:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.5\(1\):es1:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.5\(1\):es2:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.5\(1\):es3:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.5\(1\):es4:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.5\(1\):es5:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.5\(1\):es6:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):-:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es1:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es10:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es11:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es2:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es3:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es4:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es5:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es6:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es7:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es8:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\):es9:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:11.6\(1\)_fips:*:*:*:*:*:*:*cpe:2.3:a:cisco:finesse:12.0\(1\):-:*:*:*:*:*:*- +153 more
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco Finesse | affected 11.0(1)ES_Rollback ; affected 10.5(1)ES4 ; affected 11.6(1)ES3 ; affected 11.0(1)ES2 ; affected 12.0(1)ES2 ; affected 10.5(1)ES3 |
| Cisco · Cisco SocialMiner | affected 12.5(1)ES01 ; affected 10.5(1) ; affected 11.6(1) ; affected 10.6(1) ; affected 12.0(1)ES04 ; affected 10.6(2) |
| Cisco · Cisco Unified Communications Manager | affected 12.5(1)SU2 ; affected 12.5(1)SU1 ; affected 12.5(1) ; affected 12.5(1)SU3 ; affected 12.5(1)SU4 ; affected 14 |
| Cisco · Cisco Unified Communications Manager IM and Presence Service | affected 12.5(1) ; affected 12.5(1)SU1 ; affected 12.5(1)SU2 ; affected 12.5(1)SU3 ; affected 12.5(1)SU4 ; affected 14 |
| Cisco · Cisco Unified Contact Center Express | affected 10.6(1) ; affected 10.5(1)SU1 ; affected 10.6(1)SU3 ; affected 12.0(1) ; affected 10.0(1)SU1 ; affected 10.6(1)SU1 |
| Cisco · Cisco Unified Intelligence Center | affected 11.6(1) ; affected 10.5(1) ; affected 11.0(1) ; affected 11.5(1) ; affected 12.0(1) ; affected 12.5(1) |
| Cisco · Cisco Unity Connection | affected 12.5(1) ; affected 12.5(1)SU1 ; affected 12.5(1)SU2 ; affected 12.5(1)SU3 ; affected 12.5(1)SU4 ; affected 14 |
| Cisco · Cisco Virtualized Voice Browser | affected 11.0(1) ; affected 11.6(1)_ES84 ; affected 11.5(1)_ES54 ; affected 11.5(1)_ES27 ; affected 11.5(1) ; affected 11.5(1)ES36 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |