CVE-2025-20112 Cisco Unified Communications Products Privilege Escalation Vulnerability
Authenticated local attackers with ESXi admin access can escape restricted shells to gain root privileges on Cisco Unified Communications products.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-20112?
CVE-2025-20112 is a medium-severity vulnerability in Cisco Emergency Responder, published on 21 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to escape the restricted shell and gain root privileges on the underlying operating system of an affected device. To successfully exploit this vulnerability, an attacker would need administrative access to the ESXi hypervisor.
Weakness: CWE-268
Which versions are affected by CVE-2025-20112?
How do I fix CVE-2025-20112?
No fix has been published for CVE-2025-20112 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-20112 being exploited?
There is no known exploitation of CVE-2025-20112 in the wild and no public exploit code.
Sources
Also known as GHSA-xq83-m7pg-gg42.