CVE-2025-20242
A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device. This v
Description
A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this vulnerability by sending crafted TCP data to a specific port on an affected device. A successful exploit could allow the attacker to read or modify data on the affected device.
Weakness: CWE-284
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Contact Center | Other Products | cna-assigner |
Vendor-reported products (1)
- Cisco · Cisco Unified Contact Center Enterprise
Vendor advisory
cisco-sa-contcent-insuffacces-ArDOVhN8
Cisco Unified Contact Center Enterprise Cloud Connect Insufficient Access Control Vulnerability
Cisco’s rating: Medium (advisory CVSS 6.5) · Published May 21, 2025
Bug ID: CSCwn97399
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from