Cisco Unified Communications Manager Critical SSRF Security Advisory

Cisco has issued a security advisory regarding a critical vulnerability affecting its Unified Communications Manager products. The flaw, identified as a server-side request forgery, could allow unauthenticated attackers to gain root-level access by sending specially crafted HTTP requests. This risk specifically impacts systems where the WebDialer service is active, though this feature is usually turned off by default. While software updates have been released to address the issue, no formal workarounds exist beyond manually disabling the vulnerable service. Although proof-of-concept code is circulating publicly, there have been no confirmed reports of malicious actors exploiting the weakness.

Видео Cisco Unified Communications Manager Critical SSRF Security Advisory канала Juan Romero - SOCFortress Cofounder