{"id":1567,"date":"2026-06-06T07:16:02","date_gmt":"2026-06-06T00:16:02","guid":{"rendered":"https:\/\/vncybers.vn\/canh-bao-lo-hong-ssrf-tren-cisco-unified-cm-co-the-dan-den-chiem-quyen-root-cve-2026-20230\/"},"modified":"2026-06-06T14:18:57","modified_gmt":"2026-06-06T07:18:57","slug":"canh-bao-lo-hong-ssrf-tren-cisco-unified-cm-co-the-dan-den-chiem-quyen-root-cve-2026-20230","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/canh-bao-lo-hong-ssrf-tren-cisco-unified-cm-co-the-dan-den-chiem-quyen-root-cve-2026-20230\/","title":{"rendered":"C\u1ea3nh b\u00e1o: L\u1ed7 h\u1ed5ng SSRF tr\u00ean Cisco Unified CM c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn chi\u1ebfm quy\u1ec1n Root (CVE-2026-20230)"},"content":{"rendered":"

Cisco v\u1eeba ch\u00ednh th\u1ee9c ph\u00e1t h\u00e0nh c\u00e1c b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt \u0111\u1ec3 kh\u1eafc ph\u1ee5c m\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong gi\u1ea3i ph\u00e1p qu\u1ea3n l\u00fd truy\u1ec1n th\u00f4ng h\u1ee3p nh\u1ea5t Unified Communications Manager (Unified CM). L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng t\u1eeb xa, kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c, c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n ghi t\u1ec7p t\u00f9y \u00fd v\u00e0 cu\u1ed1i c\u00f9ng l\u00e0 chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n cao nh\u1ea5t (root) tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng b\u1ecb \u1ea3nh h\u01b0\u1edfng.<\/p>\n

L\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c theo d\u00f5i d\u01b0\u1edbi m\u00e3 \u0111\u1ecbnh danh CVE-2026-20230<\/strong>, c\u00f3 \u0111i\u1ec3m s\u1ed1 m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng cao. \u0110\u00e1ng ch\u00fa \u00fd, m\u00e3 khai th\u00e1c m\u1eabu (Proof-of-Concept – PoC) c\u1ee7a l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00f4ng khai tr\u00ean internet, \u0111i\u1ec1u n\u00e0y l\u00e0m gia t\u0103ng \u0111\u00e1ng k\u1ec3 nguy c\u01a1 x\u1ea3y ra c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng th\u1ef1c t\u1ebf nh\u1eafm v\u00e0o c\u00e1c doanh nghi\u1ec7p \u0111ang s\u1eed d\u1ee5ng h\u1ec7 th\u1ed1ng c\u1ee7a Cisco.<\/p>\n

Chi ti\u1ebft v\u1ec1 l\u1ed7 h\u1ed5ng SSRF v\u00e0 c\u01a1 ch\u1ebf khai th\u00e1c<\/h3>\n

Theo b\u00e1o c\u00e1o t\u1eeb Cisco, l\u1ed7 h\u1ed5ng n\u00e0y xu\u1ea5t ph\u00e1t t\u1eeb l\u1ed7i Server-Side Request Forgery (SSRF)<\/strong> trong th\u00e0nh ph\u1ea7n WebDialer c\u1ee7a Cisco Unified CM v\u00e0 Unified Communications Manager Session Management Edition (Unified CM SME). Nguy\u00ean nh\u00e2n ch\u00ednh l\u00e0 do h\u1ec7 th\u1ed1ng kh\u00f4ng ki\u1ec3m tra \u0111\u1ea7y \u0111\u1ee7 c\u00e1c tham s\u1ed1 \u0111\u1ea7u v\u00e0o trong c\u00e1c y\u00eau c\u1ea7u HTTP \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn d\u1ecbch v\u1ee5 n\u00e0y.<\/p>\n

\"Cisco<\/p>\n

K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 khai th\u00e1c l\u1ed7 h\u1ed5ng b\u1eb1ng c\u00e1ch g\u1eedi c\u00e1c y\u00eau c\u1ea7u HTTP \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1eb7c bi\u1ec7t \u0111\u1ebfn m\u1ed9t thi\u1ebft b\u1ecb b\u1ecb \u1ea3nh h\u01b0\u1edfng. N\u1ebfu khai th\u00e1c th\u00e0nh c\u00f4ng, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111\u00e1nh l\u1eeba m\u00e1y ch\u1ee7 th\u1ef1c hi\u1ec7n c\u00e1c y\u00eau c\u1ea7u thay m\u1eb7t ch\u00fang, d\u1eabn \u0111\u1ebfn kh\u1ea3 n\u0103ng ghi c\u00e1c t\u1ec7p tin t\u00f9y \u00fd v\u00e0o h\u1ec7 th\u1ed1ng t\u1ec7p c\u1ee7a m\u00e1y ch\u1ee7. T\u1eeb b\u01b0\u1edbc n\u00e0y, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n c\u00e1c k\u1ef9 thu\u1eadt leo thang \u0111\u1eb7c quy\u1ec1n \u0111\u1ec3 gi\u00e0nh quy\u1ec1n truy c\u1eadp m\u1ee9c root (qu\u1ea3n tr\u1ecb cao nh\u1ea5t).<\/p>\n

C\u00e1c phi\u00ean b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng v\u00e0 khuy\u1ebfn ngh\u1ecb t\u1eeb chuy\u00ean gia<\/h3>\n

Cisco x\u00e1c nh\u1eadn r\u1eb1ng l\u1ed7 h\u1ed5ng CVE-2026-20230 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn nhi\u1ec1u phi\u00ean b\u1ea3n c\u1ee7a Cisco Unified CM v\u00e0 Unified CM SME. C\u00e1c t\u1ed5 ch\u1ee9c s\u1eed d\u1ee5ng c\u00e1c gi\u1ea3i ph\u00e1p n\u00e0y \u0111\u01b0\u1ee3c khuy\u1ebfn ngh\u1ecb ki\u1ec3m tra ngay l\u1eadp t\u1ee9c phi\u00ean b\u1ea3n hi\u1ec7n t\u1ea1i v\u00e0 \u00e1p d\u1ee5ng c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m do Cisco cung c\u1ea5p.<\/p>\n

Trong th\u00f4ng b\u00e1o b\u1ea3o m\u1eadt, Cisco nh\u1ea5n m\u1ea1nh r\u1eb1ng ch\u01b0a ph\u00e1t hi\u1ec7n b\u1eb1ng ch\u1ee9ng v\u1ec1 vi\u1ec7c l\u1ed7 h\u1ed5ng n\u00e0y b\u1ecb khai th\u00e1c trong m\u00f4i tr\u01b0\u1eddng th\u1ef1c t\u1ebf tr\u01b0\u1edbc khi b\u1ea3n v\u00e1 \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1. Tuy nhi\u00ean, v\u1edbi vi\u1ec7c m\u00e3 ngu\u1ed3n khai th\u00e1c \u0111\u00e3 xu\u1ea5t hi\u1ec7n c\u00f4ng khai, c\u00e1c chuy\u00ean gia an ninh m\u1ea1ng t\u1ea1i VNCyberS<\/strong> khuy\u1ebfn c\u00e1o c\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean h\u1ec7 th\u1ed1ng c\u1ea7n \u01b0u ti\u00ean x\u1eed l\u00fd l\u1ed7 h\u1ed5ng n\u00e0y ngay l\u1eadp t\u1ee9c \u0111\u1ec3 b\u1ea3o v\u1ec7 h\u1ea1 t\u1ea7ng th\u00f4ng tin li\u00ean l\u1ea1c c\u1ee7a doanh nghi\u1ec7p.<\/p>\n

Ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 ki\u1ec3m tra danh s\u00e1ch \u0111\u1ea7y \u0111\u1ee7 c\u00e1c phi\u00ean b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng v\u00e0 t\u1ea3i xu\u1ed1ng b\u1ea3n v\u00e1 ch\u00ednh th\u1ee9c th\u00f4ng qua c\u1ed5ng th\u00f4ng tin h\u1ed7 tr\u1ee3 kh\u00e1ch h\u00e0ng c\u1ee7a Cisco Systems.<\/p>\n

VNCyberS t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News v\u00e0 Cisco PSIRT<\/em><\/p>","protected":false},"excerpt":{"rendered":"

Cisco v\u1eeba ch\u00ednh th\u1ee9c ph\u00e1t h\u00e0nh c\u00e1c b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt \u0111\u1ec3 kh\u1eafc ph\u1ee5c m\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong gi\u1ea3i ph\u00e1p qu\u1ea3n l\u00fd truy\u1ec1n th\u00f4ng h\u1ee3p nh\u1ea5t Unified Communications Manager (Unified CM). L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng t\u1eeb xa, kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c, c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n ghi t\u1ec7p t\u00f9y \u00fd […]<\/p>\n","protected":false},"author":2,"featured_media":1566,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[46,158,161,162,160,159],"class_list":["post-1567","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-an-ninh-mang","tag-cisco","tag-cve-2026-20230","tag-lo-hong","tag-ssrf","tag-unified-cm"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1567","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1567"}],"version-history":[{"count":2,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1567\/revisions"}],"predecessor-version":[{"id":1569,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1567\/revisions\/1569"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1566"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1567"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1567"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1567"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}