A security researcher published a proof-of-concept for a chain of zero-day vulnerabilities in Cisco Unified Communications Manager (CUCM) that achieves remote code execution with a CVSS score of 9.8. The vulnerabilities were discovered using AI-assisted fuzzing and affect all CUCM versions without the latest patches. Cisco has not yet released a fix, leaving enterprise voice systems exposed to potential takeover.
Article URL:
https://0day-rubbish.com/blog/cisco-cucm-rce-chain Comments URL: https://news.ycombinator.com/item?id=48829454
Points: 2
EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.