CVE:CVE-2017-12337
CNNVD:CNNVD-201711-660
Cisco Voice Operating System是美国思科（Cisco）公司的一套语音操作系统。Cisco Unified Communications Manager（UCM）等都是基于Cisco Voice Operating System平台的产品。Cisco Unified Communications Manager（UCM）是一款统一通信系统中的呼叫处理组件。Unified Communication Manager Session Management Edition（SME）是它的会话管理版。
基于Cisco Voice Operating System的多款Cisco产品中的更新机制存在安全漏洞。远程攻击者可利用该漏洞获取提升的访问权限。以下产品受到影响：Cisco Unified Communications Manager (UCM)；Unified Communication Manager Session Management Edition (SME)；Emergency Responder；Unity ConnectionCisco Unified Communications Manager IM and Presence Service (IMP，前称：Cisco Unified Presence)；Prime License Manager；Hosted Collaboration Mediation Fulfillment；Unified Contact Center Express (UCCx)；SocialMiner；Unified Intelligence Center (UIC)；Finesse；MediaSense。
solution:Upgrade cisco emergency_responder to a higher version than -; Upgrade cisco finesse to a higher version than -; Upgrade cisco hosted_collaboration_solution to a higher version than -; Upgrade cisco mediasense to a higher version than -; Upgrade cisco prime_license_manager to a higher version than -; Upgrade cisco socialminer to a higher version than -; Upgrade cisco unified_communications_manager to a higher version than -; Upgrade cisco unified_communications_manager_im_and_presence_service to a higher version than -; Upgrade cisco unified_contact_center_express to a higher version than -; Upgrade cisco unity_connection to a higher version than -; Upgrade cisco unified_intelligence_center to a higher version than -