Affected Systems
Cisco Unified Communications Manager (Unified CM). Specific vulnerable versions not disclosed; patched versions available since early June 2024. Affects organizations running unpatched Unified CM deployments.
Exploitation Status
Active exploitation confirmed by Cisco. Attackers are leveraging this vulnerability in real-world attacks against Cisco infrastructure. CVE identifier not yet assigned or disclosed.
Business Impact
High-severity vulnerability in enterprise voice and collaboration infrastructure. Active exploitation increases risk of unauthorized access, service disruption, or lateral movement within corporate networks. Organizations running outdated Unified CM instances face immediate compromise risk. CVSS score and technical details not yet publicly available, limiting precise risk assessment.
Urgency
🔴 Immediate
Recommended Actions
- Immediately identify all Cisco Unified Communications Manager instances in your environment and verify patch status
- Apply Cisco security patches released in early June 2024 for Unified CM to all affected systems
- Review Unified CM access logs and authentication records for suspicious activity or unauthorized access attempts since June
- Implement network segmentation to isolate Unified CM infrastructure from untrusted networks and limit lateral movement
- Monitor Cisco security advisories for CVE assignment and additional technical details to refine detection rules