CVSS 3.1 Score 10.0 of 10 (high)


Published Jan 26, 2024
Updated: Feb 2, 2024
CWE ID 502


CVE-2024-20253 is a critical vulnerability that affects multiple Cisco Unified Communications and Contact Center Solutions products. The vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on an affected device by sending a crafted message to a listening port. Exploiting this vulnerability can lead to the execution of arbitrary commands on the underlying operating system and potential establishment of root access. The impacted products include various versions of Cisco Unified Communications Manager, Cisco Unified Contact Center Express, and Cisco Unity Connection, among others. To remediate this vulnerability, it is recommended to apply the latest security updates provided by Cisco. This vulnerability poses a significant danger to organizations as it can allow attackers to gain unauthorized access and control over sensitive systems, potentially resulting in data breaches or disruption of business operations.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-20253 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options