Cisco Unified Communications and Contact Center Solutions Privilege Escalation Vulnerability

A vulnerability exists in multiple Cisco Unified Communications and Contact Center Solutions products, allowing an authenticated, local attacker to elevate privileges to root on the affected device. This issue arises from excessive permissions granted to system commands, enabling an attacker to execute crafted commands on the underlying operating system. Successfully exploiting this vulnerability could allow the attacker to escape the restricted shell and gain root access on the device. Administrative access to the ESXi hypervisor is required for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain root access on the affected device's operating system.

Remediation

Cisco has released software updates to address this vulnerability. Users should consult the Cisco Security Advisories page for information on fixed releases and upgrade instructions.