← Back

CVE-2025-20242

nvd nist
Published: May 21, 2025Modified: Jul 11, 2025

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this vulnerability by sending crafted TCP data to a specific port on an affected device. A successful exploit could allow the attacker to read or modify data on the affected device.

Affected (1)

Cisco
1 product
Unified Contact Center Enterprise
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Unified Contact Center Enterprise
Version 12.6(2)es2

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: psirt@cisco.com
Vendor Advisory

Timeline

No history available yet.