CVE-2023-20266

A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an authenticated, remote attacker to elevate privileges to root on an affected device. This vulnerability exists because the application does not properly restrict the files that are being used for upgrades. An attacker could exploit this vulnerability by providing a crafted upgrade file. A successful exploit could allow the attacker to elevate privileges to root. To exploit this vulnerability, the attacker must have valid platform administrator credentials on an affected device.

• CWE-347
• CWE-269

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-priv-esc-D8Bky5egVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-priv-esc-D8Bky5egVendor Advisory

Published

Aug 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20260A vulnerability in the application CLI of Cisco Prime Infras…6.7
• CVE-2023-20261A vulnerability in the web UI of Cisco Catalyst SD-WAN Manag…6.5
• CVE-2023-20262A vulnerability in the SSH service of Cisco Catalyst SD-WAN …7.5
• CVE-2023-20263A vulnerability in the web-based management interface of Cis…6.1
• CVE-2023-20264A vulnerability in the implementation of Security Assertion …6.1
• CVE-2023-20265A vulnerability in the web-based management interface of a s…5.4
• CVE-2023-20267A vulnerability in the IP geolocation rules of Snort 3 could…5.3
• CVE-2023-20268A vulnerability in the packet processing functionality of Ci…4.7
• CVE-2023-20269A vulnerability in the remote access VPN feature of Cisco Ad…9.1
• CVE-2023-2027The ZM Ajax Login & Register plugin for WordPress is vulnera…9.8
• CVE-2023-20270A vulnerability in the interaction between the Server Messag…5.8
• CVE-2023-20271A vulnerability in the web-based management interface of Cis…6.5