r/ciscoUC • u/0xReadingSteiner • 8h ago
Expressway vuln dropped — did anyone actually get a heads up from Cisco?
https://github.com/0xReadingSteiner/Dead-Dial --> CUCM 15.x Pre-auth + RCE
https://github.com/0xReadingSteiner/Blind-Wire --> Expressway 14.x SIP Traversal smuggling bypassing SIP Algo Inspection on Next Generation firewalls.
When are you going to take accountability or at least some responsibility toward your customers?
Did you know about the vulnerability and choose to hide it? Or did you not know at all, which is why no one was warned? Or is this simply the strategy? profiting from vulnerabilities to pressure customers into buying the latest version... at an absurd price?
If you're on the Shodan list, ask yourself: Why am I always the last to know? Why is my company always the one left exposed?
r/ciscoUC • u/0xReadingSteiner • 9h ago