{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-20112","assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","state":"PUBLISHED","assignerShortName":"cisco","dateReserved":"2024-10-10T19:15:13.210Z","datePublished":"2025-05-21T16:19:24.562Z","dateUpdated":"2026-02-26T18:28:03.732Z"},"containers":{"cna":{"title":"Cisco Unified Communications Products Privilege Escalation Vulnerability","metrics":[{"format":"cvssV3_1","cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"}}],"descriptions":[{"lang":"en","value":"A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device.\r\n\r\nThis vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to escape the restricted shell and gain root privileges on the underlying operating system of an affected device. To successfully exploit this vulnerability, an attacker would need administrative access to the ESXi hypervisor."}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-kkhZbHR5","name":"cisco-sa-cucm-kkhZbHR5"}],"exploits":[{"lang":"en","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}],"source":{"advisory":"cisco-sa-cucm-kkhZbHR5","discovery":"EXTERNAL","defects":["CSCwi52980"]},"problemTypes":[{"descriptions":[{"lang":"en","description":"Privilege Chaining","type":"cwe","cweId":"CWE-268"}]}],"affected":[{"vendor":"Cisco","product":"Cisco Emergency Responder","versions":[{"version":"12.5(1a)","status":"affected"},{"version":"12.5(1)SU1","status":"affected"},{"version":"12.5(1)","status":"affected"},{"version":"12.5(1)SU2","status":"affected"},{"version":"12.5(1)SU3","status":"affected"},{"version":"12.5(1)SU4","status":"affected"},{"version":"14","status":"affected"},{"version":"12.5(1)SU5","status":"affected"},{"version":"14SU1","status":"affected"},{"version":"12.5(1)SU6","status":"affected"},{"version":"14SU2","status":"affected"},{"version":"12.5(1)SU7","status":"affected"},{"version":"14SU3","status":"affected"},{"version":"12.5(1)SU8","status":"affected"},{"version":"12.5(1)SU8a","status":"affected"},{"version":"12.5(1)SU8b","status":"affected"},{"version":"14SU3a","status":"affected"},{"version":"15","status":"affected"},{"version":"15SU1","status":"affected"},{"version":"15SU1a","status":"affected"},{"version":"14SU4","status":"affected"},{"version":"12.5(1)SU9","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco Finesse","versions":[{"version":"11.0(1)ES_Rollback","status":"affected"},{"version":"10.5(1)ES4","status":"affected"},{"version":"11.6(1)ES3","status":"affected"},{"version":"11.0(1)ES2","status":"affected"},{"version":"12.0(1)ES2","status":"affected"},{"version":"10.5(1)ES3","status":"affected"},{"version":"11.0(1)","status":"affected"},{"version":"11.6(1)FIPS","status":"affected"},{"version":"11.6(1)ES4","status":"affected"},{"version":"11.0(1)ES3","status":"affected"},{"version":"10.5(1)ES6","status":"affected"},{"version":"11.0(1)ES7","status":"affected"},{"version":"11.5(1)ES4","status":"affected"},{"version":"10.5(1)ES8","status":"affected"},{"version":"11.5(1)","status":"affected"},{"version":"11.6(1)","status":"affected"},{"version":"10.5(1)ES10","status":"affected"},{"version":"11.6(1)ES2","status":"affected"},{"version":"11.6(1)ES","status":"affected"},{"version":"11.0(1)ES6","status":"affected"},{"version":"11.0(1)ES4","status":"affected"},{"version":"12.0(1)","status":"affected"},{"version":"11.6(1)ES7","status":"affected"},{"version":"10.5(1)ES7","status":"affected"},{"version":"11.6(1)ES8","status":"affected"},{"version":"11.5(1)ES1","status":"affected"},{"version":"11.6(1)ES1","status":"affected"},{"version":"11.5(1)ES5","status":"affected"},{"version":"11.0(1)ES1","status":"affected"},{"version":"10.5(1)","status":"affected"},{"version":"11.6(1)ES6","status":"affected"},{"version":"10.5(1)ES2","status":"affected"},{"version":"12.0(1)ES1","status":"affected"},{"version":"11.0(1)ES5","status":"affected"},{"version":"10.5(1)ES5","status":"affected"},{"version":"11.5(1)ES3","status":"affected"},{"version":"11.5(1)ES2","status":"affected"},{"version":"10.5(1)ES9","status":"affected"},{"version":"11.6(1)ES5","status":"affected"},{"version":"11.6(1)ES9","status":"affected"},{"version":"11.5(1)ES6","status":"affected"},{"version":"10.5(1)ES1","status":"affected"},{"version":"12.5(1)","status":"affected"},{"version":"12.0(1)ES3","status":"affected"},{"version":"11.6(1)ES10","status":"affected"},{"version":"12.5(1)ES1","status":"affected"},{"version":"12.5(1)ES2","status":"affected"},{"version":"12.0(1)ES4","status":"affected"},{"version":"12.5(1)ES3","status":"affected"},{"version":"12.0(1)ES5","status":"affected"},{"version":"12.5(1)ES4","status":"affected"},{"version":"12.0(1)ES6","status":"affected"},{"version":"12.5(1)ES5","status":"affected"},{"version":"12.5(1)ES6","status":"affected"},{"version":"12.0(1)ES7","status":"affected"},{"version":"12.6(1)","status":"affected"},{"version":"12.5(1)ES7","status":"affected"},{"version":"11.6(1)ES11","status":"affected"},{"version":"12.6(1)ES1","status":"affected"},{"version":"12.0(1)ES8","status":"affected"},{"version":"12.5(1)ES8","status":"affected"},{"version":"12.6(1)ES2","status":"affected"},{"version":"12.6(1)ES3","status":"affected"},{"version":"12.6(1)ES4","status":"affected"},{"version":"12.6(1)ES5","status":"affected"},{"version":"12.5(2)","status":"affected"},{"version":"12.5(1)_SU","status":"affected"},{"version":"12.5(1)SU","status":"affected"},{"version":"12.6(1)ES6","status":"affected"},{"version":"12.5(1)SU ES1","status":"affected"},{"version":"12.6(1)ES7","status":"affected"},{"version":"12.6(1)ES7_ET","status":"affected"},{"version":"12.6(2)","status":"affected"},{"version":"12.6(1)ES8","status":"affected"},{"version":"12.6(1)ES9","status":"affected"},{"version":"12.6(2)ES1","status":"affected"},{"version":"12.6(1)ES10","status":"affected"},{"version":"12.5(1)SU ES2","status":"affected"},{"version":"12.6(1)ES11","status":"affected"},{"version":"12.6(2)ES2","status":"affected"},{"version":"12.6(2)ES3","status":"affected"},{"version":"12.5(1)SU ES3","status":"affected"},{"version":"12.6(2)ES4","status":"affected"},{"version":"12.6(2)ES6","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco Prime Collaboration Deployment","versions":[{"version":"11.5(1)","status":"affected"},{"version":"11.0(1a)","status":"affected"},{"version":"11.5(1)SU1","status":"affected"},{"version":"10.5(3)","status":"affected"},{"version":"12.6(1)","status":"affected"},{"version":"11.0(1)","status":"affected"},{"version":"11.6(2)","status":"affected"},{"version":"12.1(1)","status":"affected"},{"version":"12.0(1a)","status":"affected"},{"version":"11.5(3)","status":"affected"},{"version":"10.5(1)","status":"affected"},{"version":"12.5(1)","status":"affected"},{"version":"11.5(2)","status":"affected"},{"version":"11.6(1)","status":"affected"},{"version":"10.5(2)","status":"affected"},{"version":"10.5(3)SU1","status":"affected"},{"version":"14","status":"affected"},{"version":"14SU1","status":"affected"},{"version":"14SU2","status":"affected"},{"version":"14SU3","status":"affected"},{"version":"15","status":"affected"},{"version":"15SU1","status":"affected"},{"version":"14SU4","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco SocialMiner","versions":[{"version":"12.5(1)ES01","status":"affected"},{"version":"10.5(1)","status":"affected"},{"version":"11.6(1)","status":"affected"},{"version":"10.6(1)","status":"affected"},{"version":"12.0(1)ES04","status":"affected"},{"version":"10.6(2)","status":"affected"},{"version":"12.5(1)","status":"affected"},{"version":"11.6(2)","status":"affected"},{"version":"12.0(1)","status":"affected"},{"version":"12.0(1)ES02","status":"affected"},{"version":"11.0(1)","status":"affected"},{"version":"11.5(1)","status":"affected"},{"version":"11.5(1)SU1","status":"affected"},{"version":"12.0(1)ES03","status":"affected"},{"version":"12.5(1)SU3","status":"affected"},{"version":"12.5(1)SU1","status":"affected"},{"version":"12.5(1)SU2","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco Unified Communications Manager","versions":[{"version":"12.5(1)SU2","status":"affected"},{"version":"12.5(1)SU1","status":"affected"},{"version":"12.5(1)","status":"affected"},{"version":"12.5(1)SU3","status":"affected"},{"version":"12.5(1)SU4","status":"affected"},{"version":"14","status":"affected"},{"version":"12.5(1)SU5","status":"affected"},{"version":"14SU1","status":"affected"},{"version":"12.5(1)SU6","status":"affected"},{"version":"14SU2","status":"affected"},{"version":"12.5(1)SU7","status":"affected"},{"version":"12.5(1)SU7a","status":"affected"},{"version":"14SU3","status":"affected"},{"version":"12.5(1)SU8","status":"affected"},{"version":"12.5(1)SU8a","status":"affected"},{"version":"15","status":"affected"},{"version":"15SU1","status":"affected"},{"version":"14SU4","status":"affected"},{"version":"14SU4a","status":"affected"},{"version":"15SU1a","status":"affected"},{"version":"12.5(1)SU9","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco Unified Communications Manager IM and Presence Service","versions":[{"version":"12.5(1)","status":"affected"},{"version":"12.5(1)SU1","status":"affected"},{"version":"12.5(1)SU2","status":"affected"},{"version":"12.5(1)SU3","status":"affected"},{"version":"12.5(1)SU4","status":"affected"},{"version":"14","status":"affected"},{"version":"12.5(1)SU5","status":"affected"},{"version":"14SU1","status":"affected"},{"version":"12.5(1)SU6","status":"affected"},{"version":"14SU2","status":"affected"},{"version":"14SU2a","status":"affected"},{"version":"12.5(1)SU7","status":"affected"},{"version":"14SU3","status":"affected"},{"version":"12.5(1)SU8","status":"affected"},{"version":"15","status":"affected"},{"version":"15SU1","status":"affected"},{"version":"14SU4","status":"affected"},{"version":"12.5(1)SU9","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco Unified Contact Center Express","versions":[{"version":"10.5(1)SU1","status":"affected"},{"version":"10.6(1)","status":"affected"},{"version":"11.6(1)","status":"affected"},{"version":"10.6(1)SU1","status":"affected"},{"version":"10.6(1)SU3","status":"affected"},{"version":"11.6(2)","status":"affected"},{"version":"12.0(1)","status":"affected"},{"version":"10.0(1)SU1","status":"affected"},{"version":"11.0(1)SU1","status":"affected"},{"version":"11.5(1)SU1","status":"affected"},{"version":"10.5(1)","status":"affected"},{"version":"12.5(1)","status":"affected"},{"version":"12.5(1)SU1","status":"affected"},{"version":"12.5(1)SU2","status":"affected"},{"version":"12.5(1)SU3","status":"affected"},{"version":"12.5(1)_SU03_ES01","status":"affected"},{"version":"12.5(1)_SU03_ES02","status":"affected"},{"version":"12.5(1)_SU02_ES03","status":"affected"},{"version":"12.5(1)_SU02_ES04","status":"affected"},{"version":"12.5(1)_SU02_ES02","status":"affected"},{"version":"12.5(1)_SU01_ES02","status":"affected"},{"version":"12.5(1)_SU01_ES03","status":"affected"},{"version":"12.5(1)_SU02_ES01","status":"affected"},{"version":"11.6(2)ES07","status":"affected"},{"version":"11.6(2)ES08","status":"affected"},{"version":"12.5(1)_SU01_ES01","status":"affected"},{"version":"12.0(1)ES04","status":"affected"},{"version":"12.5(1)ES02","status":"affected"},{"version":"12.5(1)ES03","status":"affected"},{"version":"11.6(2)ES06","status":"affected"},{"version":"12.5(1)ES01","status":"affected"},{"version":"12.0(1)ES03","status":"affected"},{"version":"12.0(1)ES01","status":"affected"},{"version":"11.6(2)ES05","status":"affected"},{"version":"12.0(1)ES02","status":"affected"},{"version":"11.6(2)ES04","status":"affected"},{"version":"11.6(2)ES03","status":"affected"},{"version":"11.6(2)ES02","status":"affected"},{"version":"11.6(2)ES01","status":"affected"},{"version":"10.6(1)SU3ES03","status":"affected"},{"version":"11.0(1)SU1ES03","status":"affected"},{"version":"10.6(1)SU3ES01","status":"affected"},{"version":"10.5(1)SU1ES10","status":"affected"},{"version":"10.0(1)SU1ES04","status":"affected"},{"version":"11.5(1)SU1ES03","status":"affected"},{"version":"11.6(1)ES02","status":"affected"},{"version":"11.5(1)ES01","status":"affected"},{"version":"9.0(2)SU3ES04","status":"affected"},{"version":"10.6(1)SU2","status":"affected"},{"version":"10.6(1)SU2ES04","status":"affected"},{"version":"11.6(1)ES01","status":"affected"},{"version":"10.6(1)SU3ES02","status":"affected"},{"version":"11.5(1)SU1ES02","status":"affected"},{"version":"11.5(1)SU1ES01","status":"affected"},{"version":"8.5(1)SU4ES09","status":"affected"},{"version":"8.5(1)","status":"affected"},{"version":"11.0(1)SU1ES02","status":"affected"},{"version":"12.5(1)_SU03_ES03","status":"affected"},{"version":"12.5(1)_SU03_ES04","status":"affected"},{"version":"12.5(1)_SU03_ES05","status":"affected"},{"version":"12.5(1)_SU03_ES06","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco Unified Intelligence Center","versions":[{"version":"11.6(1)","status":"affected"},{"version":"10.5(1)","status":"affected"},{"version":"11.0(1)","status":"affected"},{"version":"11.5(1)","status":"affected"},{"version":"12.0(1)","status":"affected"},{"version":"12.5(1)","status":"affected"},{"version":"11.0(2)","status":"affected"},{"version":"12.6(1)","status":"affected"},{"version":"12.5(1)SU","status":"affected"},{"version":"12.6(1)_ET","status":"affected"},{"version":"12.6(1)_ES05_ET","status":"affected"},{"version":"11.0(3)","status":"affected"},{"version":"12.6(2)","status":"affected"},{"version":"12.6(2)_504_Issue_ET","status":"affected"},{"version":"12.6.1_ExcelIssue_ET","status":"affected"},{"version":"12.6(2)_Permalink_ET","status":"affected"},{"version":"12.6.2_CSCwk19536_ET","status":"affected"},{"version":"12.6.2_CSCwm96922_ET","status":"affected"},{"version":"12.6.2_Amq_OOS_ET","status":"affected"},{"version":"12.5(2)ET_CSCwi79933","status":"affected"},{"version":"12.6(2)_ET","status":"affected"},{"version":"12.6.2_CSCwn48501_ET","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco Unity Connection","versions":[{"version":"12.5(1)","status":"affected"},{"version":"12.5(1)SU1","status":"affected"},{"version":"12.5(1)SU2","status":"affected"},{"version":"12.5(1)SU3","status":"affected"},{"version":"12.5(1)SU4","status":"affected"},{"version":"14","status":"affected"},{"version":"12.5(1)SU5","status":"affected"},{"version":"14SU1","status":"affected"},{"version":"12.5(1)SU6","status":"affected"},{"version":"14SU2","status":"affected"},{"version":"12.5(1)SU7","status":"affected"},{"version":"14SU3","status":"affected"},{"version":"12.5(1)SU8","status":"affected"},{"version":"14SU3a","status":"affected"},{"version":"12.5(1)SU8a","status":"affected"},{"version":"15","status":"affected"},{"version":"15SU1","status":"affected"},{"version":"14SU4","status":"affected"},{"version":"12.5(1)SU9","status":"affected"}],"defaultStatus":"unknown"},{"vendor":"Cisco","product":"Cisco Virtualized Voice Browser","versions":[{"version":"11.0(1)","status":"affected"},{"version":"11.6(1)_ES84","status":"affected"},{"version":"11.5(1)_ES54","status":"affected"},{"version":"11.5(1)_ES27","status":"affected"},{"version":"11.5(1)","status":"affected"},{"version":"11.5(1)ES36","status":"affected"},{"version":"12.0(1)_ES01","status":"affected"},{"version":"11.6(1)_ES85","status":"affected"},{"version":"12.5(1)_ES05","status":"affected"},{"version":"11.5(1)_ES32","status":"affected"},{"version":"11.6(1)_ES83","status":"affected"},{"version":"11.5(1)_ES29","status":"affected"},{"version":"12.0(1)_ES06","status":"affected"},{"version":"12.5(1)","status":"affected"},{"version":"12.0(1)_ES07","status":"affected"},{"version":"11.6(1)_ES80","status":"affected"},{"version":"12.0(1)_ES05","status":"affected"},{"version":"11.5(1)_ES36","status":"affected"},{"version":"11.5(1)_ES53","status":"affected"},{"version":"12.5(1)_ES08","status":"affected"},{"version":"11.5(1)ES43","status":"affected"},{"version":"12.0(1)_ES03","status":"affected"},{"version":"11.6(1)_ES86","status":"affected"},{"version":"12.0(1)_ES04","status":"affected"},{"version":"11.5(1)ES27","status":"affected"},{"version":"12.5(1)_ES03","status":"affected"},{"version":"11.6(1)_ES88","status":"affected"},{"version":"12.5(1)_ES06","status":"affected"},{"version":"11.6(1)_ES82","status":"affected"},{"version":"11.6(1)","status":"affected"},{"version":"11.5(1)ES29","status":"affected"},{"version":"12.5(1)_ES04","status":"affected"},{"version":"12.5(1)_ES07","status":"affected"},{"version":"11.6(1)_ES87","status":"affected"},{"version":"11.6(1)_ES81","status":"affected"},{"version":"12.0(1)","status":"affected"},{"version":"11.6(1)_ES22","status":"affected"},{"version":"11.5(1)_ES43","status":"affected"},{"version":"11.5(1)ES32","status":"affected"},{"version":"12.0(1)_ES02","status":"affected"},{"version":"12.5(1)_ES02","status":"affected"},{"version":"12.6(1)","status":"affected"},{"version":"12.5(1)_ES09","status":"affected"},{"version":"12.6(1)_ES01","status":"affected"},{"version":"12.0(1)_ES08","status":"affected"},{"version":"12.5(1)_ES10","status":"affected"},{"version":"12.6(1)_ES02","status":"affected"},{"version":"12.5(1)_ES11","status":"affected"},{"version":"12.5(1)_ES12","status":"affected"},{"version":"12.6(1)_ES03","status":"affected"},{"version":"12.5(1)_ES13","status":"affected"},{"version":"12.5(1)_ES14","status":"affected"},{"version":"12.6(1)_ES04","status":"affected"},{"version":"12.6(1)_ES05","status":"affected"},{"version":"12.5(1)_ES15","status":"affected"},{"version":"12.6(1)_ES06","status":"affected"},{"version":"12.6(1)_ET","status":"affected"},{"version":"12.5(1)_ES16","status":"affected"},{"version":"12.5(1)SU","status":"affected"},{"version":"12.5(1)_SU","status":"affected"},{"version":"12.5(1)_SU_ES01","status":"affected"},{"version":"12.6(1)_ES07","status":"affected"},{"version":"12.6(2)","status":"affected"},{"version":"12.5(1)_ES17","status":"affected"},{"version":"12.6(1)_ES08","status":"affected"},{"version":"12.6(1)_ES09","status":"affected"},{"version":"12.6(1)_ES10","status":"affected"},{"version":"12.5(1)_SU_ES02","status":"affected"},{"version":"12.6(2)_ES01","status":"affected"},{"version":"12.6(2)_ET01","status":"affected"},{"version":"12.5(2)_ET","status":"affected"},{"version":"12.6(2)_ES02","status":"affected"},{"version":"12.6(2)_ET_Streaming","status":"affected"},{"version":"12.6(2)ET_Transcribe","status":"affected"},{"version":"12.6(2)_ES03","status":"affected"},{"version":"12.6(2)ET_NuanceMix","status":"affected"},{"version":"12.6(2)ET_FileUpload","status":"affected"},{"version":"12.6(2)_ET02","status":"affected"},{"version":"12.6(2)_ES04","status":"affected"},{"version":"12.6.2ET_RTPfallback","status":"affected"},{"version":"12.6.2ET_CSCwf55306","status":"affected"},{"version":"12.6.2_ET_CSCwj36712","status":"affected"},{"version":"12.5.2 ET-CSCwj33374","status":"affected"},{"version":"12.5(1) SU ET","status":"affected"},{"version":"12.6(2)ET_CSCwj87296","status":"affected"},{"version":"12.6(2)_ES05","status":"affected"},{"version":"12.5.2_ET_CSCvz27014","status":"affected"},{"version":"12.6(2)_ET","status":"affected"},{"version":"12.6.2-ET","status":"affected"},{"version":"12.6(2)ET_CSCwk83135","status":"affected"},{"version":"12.6.2_ET_CX_ALAW","status":"affected"},{"version":"12.6.2-ET01-SSL","status":"affected"},{"version":"12.6(2)_ES06","status":"affected"}],"defaultStatus":"unknown"}],"providerMetadata":{"orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco","dateUpdated":"2025-05-21T16:19:24.562Z"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-20112","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-05-22T03:55:23.838603Z"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-26T18:28:03.732Z"}}]}}