CVE-2025-20275 — Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability

Description (CNA)

A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device.  This vulnerability is due to insecure deserialization of Java objects by the affected software. An attacker could exploit this vulnerability by persuading an authenticated, local user to open a crafted .aef file. A successful exploit could allow the attacker to execute arbitrary code on the host that is running the editor application with the privileges of the user who launched it.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco Unified Contact Center Express	affected 10.6(1); affected 10.5(1)SU1; affected 10.6(1)SU3; affected 12.0(1); affected 10.0(1)SU1; affected 10.6(1)SU1; affected 11.0(1)SU1; affected 11.5(1)SU1; affected 10.5(1); affected 11.6(1); affected 11.6(2); affected 12.5(1); affected 12.5(1)SU1; affected 12.5(1)SU2; affected 12.5(1)SU3; affected 12.5(1)_SU03_ES01; affected 12.5(1)_SU03_ES02; affected 12.5(1)_SU02_ES03; affected 12.5(1)_SU02_ES04; affected 12.5(1)_SU02_ES02; affected 12.5(1)_SU01_ES02; affected 12.5(1)_SU01_ES03; affected 12.5(1)_SU02_ES01; affected 11.6(2)ES07; affected 11.6(2)ES08; affected 12.5(1)_SU01_ES01; affected 12.0(1)ES04; affected 12.5(1)ES02; affected 12.5(1)ES03; affected 11.6(2)ES06; affected 12.5(1)ES01; affected 12.0(1)ES03; affected 12.0(1)ES01; affected 11.6(2)ES05; affected 12.0(1)ES02; affected 11.6(2)ES04; affected 11.6(2)ES03; affected 11.6(2)ES02; affected 11.6(2)ES01; affected 10.6(1)SU3ES03; affected 11.0(1)SU1ES03; affected 10.6(1)SU3ES01; affected 10.5(1)SU1ES10; affected 10.0(1)SU1ES04; affected 11.5(1)SU1ES03; affected 11.6(1)ES02; affected 11.5(1)ES01; affected 9.0(2)SU3ES04; affected 10.6(1)SU2; affected 10.6(1)SU2ES04; affected 11.6(1)ES01; affected 10.6(1)SU3ES02; affected 11.5(1)SU1ES02; affected 11.5(1)SU1ES01; affected 8.5(1); affected 11.0(1)SU1ES02; affected 12.5(1)_SU03_ES03; affected 12.5(1)_SU03_ES04; affected 12.5(1)_SU03_ES05; affected 12.5(1)_SU03_ES06

Vendor / product

Versions

Cisco / Cisco Unified Contact Center Express

affected 10.6(1); affected 10.5(1)SU1; affected 10.6(1)SU3; affected 12.0(1); affected 10.0(1)SU1; affected 10.6(1)SU1; affected 11.0(1)SU1; affected 11.5(1)SU1; affected 10.5(1); affected 11.6(1); affected 11.6(2); affected 12.5(1); affected 12.5(1)SU1; affected 12.5(1)SU2; affected 12.5(1)SU3; affected 12.5(1)_SU03_ES01; affected 12.5(1)_SU03_ES02; affected 12.5(1)_SU02_ES03; affected 12.5(1)_SU02_ES04; affected 12.5(1)_SU02_ES02; affected 12.5(1)_SU01_ES02; affected 12.5(1)_SU01_ES03; affected 12.5(1)_SU02_ES01; affected 11.6(2)ES07; affected 11.6(2)ES08; affected 12.5(1)_SU01_ES01; affected 12.0(1)ES04; affected 12.5(1)ES02; affected 12.5(1)ES03; affected 11.6(2)ES06; affected 12.5(1)ES01; affected 12.0(1)ES03; affected 12.0(1)ES01; affected 11.6(2)ES05; affected 12.0(1)ES02; affected 11.6(2)ES04; affected 11.6(2)ES03; affected 11.6(2)ES02; affected 11.6(2)ES01; affected 10.6(1)SU3ES03; affected 11.0(1)SU1ES03; affected 10.6(1)SU3ES01; affected 10.5(1)SU1ES10; affected 10.0(1)SU1ES04; affected 11.5(1)SU1ES03; affected 11.6(1)ES02; affected 11.5(1)ES01; affected 9.0(2)SU3ES04; affected 10.6(1)SU2; affected 10.6(1)SU2ES04; affected 11.6(1)ES01; affected 10.6(1)SU3ES02; affected 11.5(1)SU1ES02; affected 11.5(1)SU1ES01; affected 8.5(1); affected 11.0(1)SU1ES02; affected 12.5(1)_SU03_ES03; affected 12.5(1)_SU03_ES04; affected 12.5(1)_SU03_ES05; affected 12.5(1)_SU03_ES06

CWE

CWE-502

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uccx-editor-rce-ezyYZte8

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.