A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on affected device. To exploit this vulnerability, must have valid administrative credentials.  This is due insecure deserialization Java objects by software. An sending a crafted object A successful underlying operating system device as low-privilege user. also undertake further actions elevate their privileges root.