CUCM Remote Code Execution Vulnerability CSCwd64245

[kerryhuang]

Important Notes:
 As such, the COP file should be
installed via the CLI, not the GUI. 

We use the Cisco Unified Operating System Administration Web page (GUI).

The current update status remains at software upgrade status. Is there a way to stop it or fix it?

[Roger Kallberg]

See my response to your same question in this thread. https://community.cisco.com/t5/ip-telephony-and-phones/the-selected-file-is-not-valid-please-ensure-that-cop-iso-is/m-p/5103987/highlight/true#M415378

[kerryhuang]

 Installation of a Cisco Option Package (COP) cannot be  canceled.

[Roger Kallberg · Accepted solution]

Then you’ll need to restart the CM node. If that doesn’t clear out the installation lock you’ll need to work with TAC for them to clear it out with root access.