Back to overview

CVE-2025-20354

CRITICAL
9.8
CVSS 3.1
Description
A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanisms that are associated to specific Cisco Unified CCX features. An attacker could exploit this vulnerability by uploading a crafted file to an affected system through the Java RMI process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root.

Metadata

CVE ID
CVE-2025-20354
State
PUBLISHED
Assigner
cisco
Reserved
2024-10-10 19:15 UTC
Published
2025-11-05 16:31 UTC
Last updated
2026-02-26 17:47 UTC
Primary CWE
CWE-434
Unrestricted Upload of File with Dangerous Type
Vendor / Product
Cisco / Cisco Unified Contact Center Express
Sources
cve.org  ·  NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
Cisco Cisco Unified Contact Center Express — 10.5(1)SU1, 10.6(1), 11.6(1), 10.6(1)SU1 …
Weakness (CWE)
CWESourceDescription
CWE-434 cna Unrestricted Upload of File with Dangerous Type
CVSS scores (1)
ScoreSeverityVersionSourceVector
9.8 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References (1)
Back to overview