PT-2025-23824 · Cisco · Cisco Unified Ccx

Published 2025-06-04 · Updated 2025-07-22 · CVE-2025-20276

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Unified CCX (affected versions not specified)

Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The attacker must have valid administrative credentials to exploit this issue. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attacker could exploit this by sending a crafted Java object to an affected device, potentially allowing the execution of arbitrary code on the underlying operating system as a low-privilege user. The attacker could also undertake further actions to elevate their privileges to root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2025-08667

CVE-2025-20276

Affected Products

Cisco Unified Ccx

References · 9

• https://osv.dev/vulnerability/CVE-2025-20276 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20276 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uccx-multi-UhOTvPGL · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08667 · Security Note
• https://twitter.com/CVEnew/status/1930305584617927082 · Twitter Post
• https://t.me/cvetracker/25419 · Telegram Post
• https://t.me/cveNotify/129811 · Telegram Post
• https://twitter.com/transilienceai/status/1930432905999704231 · Twitter Post
• https://t.me/cvenotify/129811 · Telegram Post