The vulnerability of the Cisco Emergency Responder, Cisco Unified Communications Manager, and Cisco Unified Communications Manager Session Management Edition (SME) systems, as well as the Cisco Unity Connection messaging system, stems from deficiencies in access control. This allows attackers to escalate their privileges.

🗓️ 07 Sep 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Access control flaws in Cisco Emergency Responder, Unified Communications Manager, Session Management Edition, and Unity Connection enable remote privilege escalation.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2023-20266	30 Aug 202320:12	–	circl
Cisco	Cisco Unified Communications Products Privilege Escalation Vulnerability	30 Aug 202316:00	–	cisco
Tenable Nessus	Cisco Unified Communications Manager Privilege Escalation (cisco-sa-cucm-priv-esc-D8Bky5eg)	6 Sep 202300:00	–	nessus
Tenable Nessus	Cisco Emergency Responder Privilege Escalation (cisco-sa-cucm-priv-esc-D8Bky5eg)	6 Sep 202300:00	–	nessus
Tenable Nessus	Cisco Unity Connection Privilege Escalation (cisco-sa-cucm-priv-esc-D8Bky5eg)	6 Sep 202300:00	–	nessus
CNNVD	Cisco多款产品安全漏洞	30 Aug 202300:00	–	cnnvd
CVE	CVE-2023-20266	30 Aug 202316:18	–	cve
Cvelist	CVE-2023-20266	30 Aug 202316:18	–	cvelist
EUVD	EUVD-2023-24445	3 Oct 202520:07	–	euvd
NVD	CVE-2023-20266	30 Aug 202317:15	–	nvd

Vulners

Node

cisco_systems cisco_emergency_responderMatch12.5.1su4

cisco_systems cisco_emergency_responderMatch12.5.1su8a

cisco_systems cisco_emergency_responderMatch14su3

cisco_systems cisco_unified_communications_managerMatch12.5.1su8

cisco_systems cisco_unified_communications_manager_smeMatch12.5.1su8

cisco_systems unity_connectionMatch12.5.1su6

cisco_systems unity_connectionMatch12.5.1su7

cisco_systems unity_connectionMatch12.5.1su8

cisco_systems unity_connectionMatch14su2

cisco_systems unity_connectionMatch14su3

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-priv-esc-D8Bky5eg
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023083111
vuldb	www.vuldb.com/ru/
web	www.web.nvd.nist.gov/view/vuln/detail

07 Sep 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 36.5

CVSS 27.9

EPSS0.00364