Critical RCE flaw detected in Cisco’s communication software

Cisco warns that some Unified Communications Manager and Contact Center Solutions products have a critical remote code execution security vulnerability.

Cisco’s Unified Communications and Contact Center Solutions offer voice, video, and messaging services, as well as customer engagement and management.

• Alert
• Vulnerabilities

159 CVEs Exploited in Q1 2025 : 28.3% Within 24 Hours of Disclosure

By infosecbulletin / Friday , April 25 2025

In Q1 2025, VulnCheck identified evidence of 159 CVEs publicly disclosed for the first time as exploited in the wild....

Read More

• Alert
• Vulnerabilities

NVIDIA NeMo Framework Vuln Allow Attackers RCE

By infosecbulletin / Friday , April 25 2025

The NVIDIA NeMo Framework has three vulnerabilities that could enable attackers to execute remote code, risking AI system compromise and...

Read More

• Alert
• Vulnerabilities

Cisco Issued Urgent Security Advisories For Multiple Products

By infosecbulletin / Thursday , April 24 2025

Cisco issued a security advisory about a remote code execution (RCE) vulnerability (CVE-2025-32433) affecting multiple products in its portfolio due...

Read More

• Alert
• Vulnerabilities

SonicWall patched SSLVPN Vuln Allowing Firewall Crashing

By infosecbulletin / Thursday , April 24 2025

SonicWall has revealed a vulnerability in its SonicOS SSLVPN Virtual Office interface that could let remote attackers crash firewall appliances....

Read More

• Alert
• Vulnerabilities

GitLab Releases Security Update For Multiple Vulns

By infosecbulletin / Thursday , April 24 2025

GitLab has announced a security advisory urging users to upgrade their self-managed installations right away. Versions 17.11.1, 17.10.5, and 17.9.7...

Read More

• Alert
• Cyber Attack

ISPAB president “whatsapp” got hacked via phishing link

By infosecbulletin / Wednesday , April 23 2025

Imdadul Haque, the president of Internet Service Provider of Bangladesh (ISPAB) said, I automatically got back my WhatsApp account. What...

Read More

• Alert
• Vulnerabilities

Zyxel released patches 2 vulns in its USG FLEX H series firewalls

By infosecbulletin / Wednesday , April 23 2025

Zyxel Networks has issued critical security patches for two high-severity vulnerabilities in its USG FLEX H series firewalls. These flaws...

Read More

• Data Breach
• Hot Topic

South Korea’s largest SK Telecom Hit by Malware: SIM-related info leaked

By infosecbulletin / Wednesday , April 23 2025

South Korea's largest mobile operator, SK Telecom, is warning that a malware infection allowed threat actors to access sensitive USIM-related...

Read More

• Alert

ChatGPT Develops Exploit for CVEs Before Public PoCs Share

By infosecbulletin / Wednesday , April 23 2025

Security researcher Matt Keeley showed that artificial intelligence can now develop working exploits for critical vulnerabilities before public proof-of-concept (PoC)...

Read More

• Alert
• Vulnerabilities

TP-Link Router Vulns Allow to Execute Malicious SQL Commands

By infosecbulletin / Tuesday , April 22 2025

Several vulnerabilities have been found in TP-Link routers, exposing users to serious security risks from SQL injection flaws in their...

Read More

The company issued a security bulletin about a vulnerability (CVE-2024-20253) that could let an unauthorized remote attacker run code on a device.

Researcher Julien Egloff from Synacktiv discovered a vulnerability with a 9.9 base score out of 10. The vulnerability is due to incorrect handling of user-input data stored in memory.

Attackers can exploit this vulnerability by sending a carefully designed message to a specific port. This can allow them to execute any command using the web services user’s privileges and gain root access.

CVE-2024-20253 impacts the following Cisco products in their default configurations:

Packaged Contact Center Enterprise (PCCE) versions 12.0 and earlier, 12.5(1) and 12.5(2)
Unified Communications Manager (Unified CM) versions 11.5, 12.5(1), and 14. (same for Unified CM SME)
Unified Communications Manager IM & Presence Service (Unified CM IM&P) versions 11.5(1), 12.5(1), and 14.
Unified Contact Center Enterprise (UCCE) versions 12.0 and earlier, 12.5(1), and 12.5(2).
Unified Contact Center Express (UCCX) versions 12.0 and earlier and 12.5(1).
Unity Connection versions 11.5(1), 12.5(1), and 14.
Virtualized Voice Browser (VVB) versions 12.0 and earlier, 12.5(1), and 12.5(2).

The vendor says there’s no other solution and advises applying the security updates. The updates fix the critical remote code execution (RCE) flaw.

PCCE: 12.5(1) and 12.5(2) apply patch ucos.v1_java_deserial-CSCwd64245.cop.sgn.
Unified CM and Unified CME: 12.5(1)SU8 or ciscocm.v1_java_deserial-CSCwd64245.cop.sha512. 14SU3 or ciscocm.v1_java_deserial-CSCwd64245.cop.sha512.
Unified CM IM&P: 12.5(1)SU8 or ciscocm.cup-CSCwd64276_JavaDeserialization.cop.sha512. 14SU3 or ciscocm.cup-CSCwd64276_JavaDeserialization.cop.sha512.
UCCE: Apply patch ucos.v1_java_deserial-CSCwd64245.cop.sgn for 12.5(1) and 12.5(2).
UCCX: Apply patch ucos.v1_java_deserial-CSCwd64245.cop.sgn for 12.5(1).
VVB: Apply patch ucos.v1_java_deserial-CSCwd64245.cop.sgn for 12.5(1) and 12.5(2).

Cisco recommends using access control lists (ACLs) as a mitigation strategy when applying updates is not immediately feasible.