Vulnerabilitycritical

Cisco fixes critical UCCX flaw allowing Root command execution

Security Affairsby @securityaffairsNov 7, 2025 · 11:37 UTC (Nov 7, 2025)1 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2025-20354 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-20354 CVE-2025-20333 CVE-2025-20362

Tags: cve-2025-20354 cve-2025-20333 cve-2025-20362 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-20333 +1 related CVE CVE-2025-20362	Authenticated Buffer Overflow RCE in Cisco ASA/FTD VPN Web Server	9.9 group max	71%	KEV	Sep 25, 2025 KEV Sep 25, 2025
CVE-2025-20354	A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary…	9.8	<1%		Nov 5, 2025

From the original article

1 min read at securityaffairs.com

Cisco patched a critical flaw in its Unified Contact Center Express (UCCX) software that allowed attackers to execute commands with root privileges. Cisco released security updates to address a critical vulnerability, tracked as CVE-2025-20354 (CVSS score 9. 8), in the Unified Contact Center Express (UCCX) software.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.