{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/unified-contact-center-enterprise/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:cisco:ios_xr:24.2.1:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":6.7,"id":"CVE-2024-20456"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Unified Contact Center Enterprise"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Cisco"],"content_html":"\u003cp\u003eCisco has disclosed a security vulnerability affecting Cisco Unified Contact Center Enterprise (UCCE). The vulnerability allows a remote, authenticated attacker to perform unauthorized file manipulation on the affected system. This security flaw poses a risk to system integrity and configuration stability, as an attacker with valid credentials could potentially modify sensitive system files or security configurations. The vulnerability is tracked as CVE-2024-20456. Defenders should prioritize auditing administrative access logs and monitoring for anomalous file modifications in the UCCE environment.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation could result in the unauthorized modification of system files, leading to a loss of system integrity. While the attack requires prior authentication, it enables an attacker to move beyond their intended privileges to potentially alter system settings or security controls within the enterprise contact center environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReview Cisco's official security advisory for available patches related to CVE-2024-20456.\u003c/li\u003e\n\u003cli\u003eAudit administrative access logs for Cisco Unified Contact Center Enterprise to detect suspicious or unauthorized sessions.\u003c/li\u003e\n\u003cli\u003eImplement strict access controls for UCCE interfaces to minimize the risk of credential compromise that could facilitate exploitation.\u003c/li\u003e\n\u003cli\u003eMonitor for unexpected file modifications on servers running Unified Contact Center Enterprise.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-20T13:11:29Z","date_published":"2026-08-20T13:11:29Z","id":"https://feed.craftedsignal.io/briefs/2026-08-cisco-ucce-vuln/","summary":"An authenticated remote attacker can exploit a vulnerability in Cisco Unified Contact Center Enterprise to perform unauthorized file manipulation.","title":"Arbitrary File Manipulation Vulnerability in Cisco Unified Contact Center Enterprise","url":"https://feed.craftedsignal.io/briefs/2026-08-cisco-ucce-vuln/"}],"language":"en","title":"CraftedSignal Threat Feed - Unified Contact Center Enterprise","version":"https://jsonfeed.org/version/1.1"}