Critical Cisco Vulnerability in Unified CM Exposes Root Access and Urges Phone Replacement
TL;DR
Cisco has issued security updates for a critical vulnerability (CVE-2025-20309) in Unified Communications Manager that allows attackers to gain root access using static credentials, potentially leading to severe network compromise. The flaw affects multiple versions and was discovered during internal testing, with no evidence of active exploitation yet.
Topics:technologynetwork-security#cisco#cve-2025-20309#network-security#root-access#unified-cm#vulnerability
- Critical Cisco Vulnerability in Unified CM Grants Root Access via Static Credentials The Hacker News
- Cisco scores a perfect 10 - sadly for a critical flaw in its comms platform theregister.com
- Cisco removed the backdoor account from its Unified Communications Manager Security Affairs
- Cisco warns that Unified CM has hardcoded root SSH credentials BleepingComputer
- Cisco Unified Communications Manager Unintentionally Provides A Good Reason To Dump Those Desk Phones PC Perspective
Want the full story? Read the original reporting
Read on The Hacker News