CISCO FIXES MAXIMUM-SEVERITY FLAW IN ENTERPRISE UNIFIED COMMS PLATFORM (CVE-2025-20309)

Summary from the TLDR InfoSec newsletter

Cisco discovered CVE-2025-20309, a backdoor vulnerability, in its Unified Communications Manager with unchangeable default root credentials. It affects only Engineering Special releases (15.0.1.13010-1 through 15.0.1.13017-1), allowing remote attackers root access. The vulnerability was found during internal testing with no known exploitation.