Cisco Patches Critical Vulnerabilities in Contact Center Appliance

Cisco has released patches for nearly a dozen vulnerabilities across its networking and contact centre products, including two critical flaws that could allow remote code execution on the Unified CCX appliance.

The issues, tracked as CVE-2025-20354 (CVSS 9.8) and CVE-2025-20358 (CVSS 9.4), affect the Cisco Unified Contact Center Express and could be exploited remotely without authentication to upload arbitrary files and execute commands with root privileges, or to bypass authentication via the Editor application and escalate privileges to administrator.

Cisco notes that a successful exploit could enable arbitrary scripts to be run on the underlying operating system of an affected Unified CCX server, as an internal non-root user, and these flaws were addressed in Unified CCX versions 12.5 SU3 ES07 and 15.0 ES01, according to Cisco Security Advisory.

The company also patched CVE-2025-20343, a high-severity DoS flaw in Identity Services Engine that can be exploited remotely without authentication, plus eight medium-severity flaws across ISE, ISE-PIC, Unified CCX, Unified CCE, Packaged CCE and CUIC. Cisco says it is not aware of any of the vulnerabilities being exploited in the wild.