Critical Cisco Flaw Lets Hackers Remotely Take Over Unified Comms Systems
Critical Cisco Flaw Lets Hackers Remotely Take Over Unified Comms Systems
26 January 2024
Cisco has released patches to address a critical security flaw impacting Unified Communications and Contact Center Solutions products that could permit an unauthenticated, remote attacker to execute arbitrary code on an affected device.
Tracked as CVE-2024-20253 (CVSS score: 9.9), the issue stems from improper processing of user-provided data that a threat actor could abuse to send a