Cisco has launched safety updates to handle a maximum-severity safety flaw in Unified Communications Supervisor (Unified CM) and Unified Communications Supervisor Session Administration Version (Unified CM SME) that would allow an attacker to login to a prone machine as the basis person, permitting them to realize elevated privileges.
The vulnerability, tracked as CVE-2025-20309, carries a CVSS rating
Essential Cisco Vulnerability in Unified CM Grants Root Entry by way of Static Credentials
