Remote Code Execution Vulnerability in Cisco Unified CCX Software
CVE-2025-20354

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Unified Contact Center Express
Vendor
CVE Published:
5 November 2025

Badges

👾 Exploit Exists

What is CVE-2025-20354?

A vulnerability exists in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX, allowing unauthenticated attackers to upload arbitrary files and execute commands with root privileges. This issue arises from weak authentication mechanisms linked to certain Cisco Unified CCX features. By exploiting this flaw, an attacker could manipulate an affected system to run arbitrary commands, potentially leading to significant security breaches.

Affected Version(s)

Cisco Unified Contact Center Express 10.5(1)SU1

Cisco Unified Contact Center Express 10.6(1)

Cisco Unified Contact Center Express 11.6(1)

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-20354 : Remote Code Execution Vulnerability in Cisco Unified CCX Software