CVE-2025-20309 affects Cisco Unified CM

Cisco removed the backdoor account from its Unified Communications Manager

securityaffairs.co - 02/Jul 19:13

Digital communications technology giant Cisco addressed a static SSH credentials vulnerability in its Unified Communications Manager (Unified CM). A...

Cisco Unified CM Vulnerability Lets Remote Attacker Gain Root Access

itsecuritynews.info - 03/Jul 07:05

A newly disclosed, critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME) has...

Cisco Unified CM Vulnerability Lets Remote Attacker Gain Root Access

itsecuritynews.info - 03/Jul 07:05

A newly disclosed, critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME) has...

Cisco warns that Unified CM has hardcoded root SSH credentials

bleepingcomputer.com - 02/Jul 17:08

Cisco has removed a backdoor account from its Unified Communications Manager (Unified CM), which would have allowed remote attackers to log in to...

Cisco warns that Unified CM has hardcoded root SSH credentials

bleepingcomputer.com - 02/Jul 17:08

Cisco has removed a backdoor account from its Unified Communications Manager (Unified CM), which would have allowed remote attackers to log in to...

ModSecurity WAF Vulnerability Enables DoS Using Empty XML Elements

itsecuritynews.info - 03/Jul 06:04

A newly disclosed vulnerability in ModSecurity, a widely used open-source web application firewall (WAF), exposes servers to denial-of-service (DoS)...