Critical Cisco UCCX flaw lets attackers run commands as root