Cisco warns that Unified CM has hardcoded root SSH credentials

Cisco warns that Unified CM has hardcoded root SSH credentials

For Immediate Release
2025-07-02 17:08:00

Cisco has removed a backdoor account from its Unified Communications Manager (Unified CM), which would have allowed remote attackers to log in to unpatched devices with root privileges.

Cisco Unified Communications Manager (CUCM),…

Article Source
https://www.bleepingcomputer.com/news/security/cisco-removes-unified-cm-callManager-backdoor-root-account/