Cisco Removes Backdoor Account That Gave Hackers Root Access to Unified CM Systems

Cisco has patched a critical backdoor vulnerability (CVE-2025-20309) in its Unified Communications Manager that contained hardcoded root credentials, allowing unauthenticated remote attackers to gain complete system control. The flaw affects versions 15.0.1.13010-1 through 15.0.1.13017-1 a...