Product:
Cisco Unified CCX
Summary
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to insufficient input validation associated with specific UI features. An attacker could exploit this vulnerability by uploading a crafted file to the web UI, potentially gaining access to the underlying operating system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-20375 |
Exploitation
To exploit this vulnerability, an attacker must have valid administrative credentials. Once authenticated, the attacker can upload a specially crafted file through the web UI. If successful, this could allow the attacker to execute arbitrary files on the vulnerable system, leading to unauthorized access and control over the operating system.
Affected Products
- Cisco Unified CCX: Affected by the vulnerability in its web UI, allowing file uploads and execution.
Mitigation
To mitigate this vulnerability, it is recommended to implement strict access controls and ensure that only authorized users have administrative credentials. Additionally, keeping the system updated with the latest security patches can help protect against potential exploits.