References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm https://nvd.nist.gov/vuln/detail/CVE-2024-20253 https://www.picussecurity.com/resource/blog/cve-2024-20253-cisco-unified-comms-remote-code-execution-vulnerability https://www.rescana.com/post/critical-cisco-unified-communications-zero-day-cve-2024-20253-actively-exploited-millions-of-ente https://www.spotit.be/en/resources/security-bulletins/cisco-unified-communications-vulnerability/ https://www.ncsc.gov.ie/pdfs/Cisco_Unified_Communications_Products_Remote_Code_Execution_Vulnerability.pdf https://www.anquanke.com/post/id/292939 https://www.anquan114.com/archives/1253
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File UploadPoCCVE-2026-20253: Splunk Enterprise & Cloud Platform - Unrestricted File Upload思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)Cisco Asyncos 整数溢出漏洞 可导致远程代码执行PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞Cisco IOS 缓冲区溢出漏洞PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)