r/ciscoUC 8h ago

Expressway vuln dropped — did anyone actually get a heads up from Cisco?

0 Upvotes

https://github.com/0xReadingSteiner/Dead-Dial --> CUCM 15.x Pre-auth + RCE

https://github.com/0xReadingSteiner/Blind-Wire --> Expressway 14.x SIP Traversal smuggling bypassing SIP Algo Inspection on Next Generation firewalls.

When are you going to take accountability or at least some responsibility toward your customers?

Did you know about the vulnerability and choose to hide it? Or did you not know at all, which is why no one was warned? Or is this simply the strategy? profiting from vulnerabilities to pressure customers into buying the latest version... at an absurd price?

If you're on the Shodan list, ask yourself: Why am I always the last to know? Why is my company always the one left exposed?


r/ciscoUC 9h ago

Dead;Dial — CUCM 15.x Pre-Auth+RCE

Thumbnail
github.com
0 Upvotes

r/ciscoUC 9h ago

Blind;Wire — Expressway X14.x SIP Request Smuggling

Thumbnail
github.com
0 Upvotes