Authentication Flaw in Cloud Connect Component of Cisco Unified Contact Center Enterprise

CVE-2025-20242

What is CVE-2025-20242?

A significant vulnerability exists in the Cloud Connect component of Cisco Unified Contact Center Enterprise, primarily due to inadequate authentication mechanisms. This weakness enables an unauthenticated attacker to send specially crafted TCP data to a specified port on an affected device, potentially allowing them to read or modify sensitive data. It is crucial for organizations using this affected product to implement appropriate security measures to mitigate the risks associated with this vulnerability.

References