Critical Cisco Flaw Lets Hackers Remotely Take Over Unified Comms Systems

January 26, 2024 at 12:57AM Cisco has released patches for a critical security flaw (CVE-2024-20253) affecting Unified Communications and Contact Center Solutions products, allowing an attacker to execute arbitrary code. The flaw impacts various products including Unified Communications Manager and Unity Connection. Users are advised to set up access control lists while awaiting updates. Cisco … Read more

Cisco Patches Critical Vulnerability in Enterprise Collaboration Products

January 25, 2024 at 11:48AM Cisco announced security updates to address a critical-severity vulnerability (CVE-2024-20253, CVSS 9.9) affecting multiple Unified Communications and Contact Center Solutions products. The flaw could allow attackers to execute arbitrary commands with system privileges. Cisco advises immediate patching and mitigation using access control lists. Medium-severity flaws in Business 250/350 series switches … Read more

Cisco warns of critical RCE flaw in communications software

January 25, 2024 at 09:41AM Cisco has issued a security bulletin warning of a critical remote code execution vulnerability, tracked as CVE-2024-20253, affecting several of its Unified Communications Manager and Contact Center Solutions products. The vulnerability could allow remote attackers to execute arbitrary code. The vendor recommends applying available security updates and implementing access control … Read more