CVE-2023-20266

🗓️ 30 Aug 2023 16:18:42Reported by ciscoType

Cisco security vulnerability with privileged escalation

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the Cisco Emergency Responder, Cisco Unified Communications Manager, and Cisco Unified Communications Manager Session Management Edition (SME) systems, as well as the Cisco Unity Connection messaging system, stems from deficiencies in access control. This allows attackers to escalate their privileges.	7 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-20266	30 Aug 202320:12	–	circl
Cisco	Cisco Unified Communications Products Privilege Escalation Vulnerability	30 Aug 202316:00	–	cisco
Tenable Nessus	Cisco Unified Communications Manager Privilege Escalation (cisco-sa-cucm-priv-esc-D8Bky5eg)	6 Sep 202300:00	–	nessus
Tenable Nessus	Cisco Emergency Responder Privilege Escalation (cisco-sa-cucm-priv-esc-D8Bky5eg)	6 Sep 202300:00	–	nessus
Tenable Nessus	Cisco Unity Connection Privilege Escalation (cisco-sa-cucm-priv-esc-D8Bky5eg)	6 Sep 202300:00	–	nessus
CNNVD	Cisco多款产品安全漏洞	30 Aug 202300:00	–	cnnvd
CVE	CVE-2023-20266	30 Aug 202316:18	–	cve
EUVD	EUVD-2023-24445	3 Oct 202520:07	–	euvd
NVD	CVE-2023-20266	30 Aug 202317:15	–	nvd

[
  {
    "vendor": "Cisco",
    "product": "Cisco Emergency Responder",
    "versions": [
      {
        "version": "12.5(1)SU4",
        "status": "affected"
      },
      {
        "version": "12.5(1)SU8a",
        "status": "affected"
      },
      {
        "version": "14SU3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco Unity Connection",
    "versions": [
      {
        "version": "12.5(1)SU6",
        "status": "affected"
      },
      {
        "version": "12.5(1)SU7",
        "status": "affected"
      },
      {
        "version": "12.5(1)SU8",
        "status": "affected"
      },
      {
        "version": "14SU2",
        "status": "affected"
      },
      {
        "version": "14SU3",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco Unified Communications Manager",
    "versions": [
      {
        "version": "12.5(1)SU8",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-priv-esc-D8Bky5eg

25 Jan 2024 16:58Current

7High risk

Vulners AI Score7

CVSS 3.16.5

EPSS0.00364