Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

Cisco has confirmed that a recently patched vulnerability in its Unified Communications Manager is now being actively exploited in the wild. The security flaw, which affects appliances with the WebDialer service enabled, could allow attackers to drop malicious files on the system and potentially gain root access through server-side request forgery attacks. Cisco is urging customers to immediately upgrade to the patched versions released in June, following reports of exploitation from security researchers.