Dear #followerpower,
especially those with experience in Cisco Unified Communication:
When installing #Cisco #CUCM #Callmanager, the installer requests a #NTP server. But neither ntpsec on Debian 12 nor openntp nor the ntp service on pfSense seems suitable for the CUCM installer as it reports "inaccessible".
Sometimes (on first try) it reports "accesible", though. I suspect the kod setting, maybe.
Any advice is welcome! 🙂
I am making a point of not looking at anything related to #msBuild, specifically #msTeams, this year
In a couple of months it will no long be my problem^w job. It’s been an interesting, infuriating, educational, frustrating few years. I’ve learned a lot, good and bad, but I know I’ll be very glad to see the back of it
It’s with mixed emotions that I’m (mostly) leaving telecoms. I loved working with #Cisco #CallManager, but the #Microsoft/ #Teams experience, sadly, has tainted that
Servers all patched, my work here is done! 🥳
For those of you following #CVE CVE-2024-20253, note that #cisco have released a small patch for affected #callmanager systems overnight. As such you shouldn't need to do full updates to fixed versions to remediate so long as you're running 12.5(1) or higher.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm has been updated to reflect the new patches for #cucm #imp#cuc #ucce #uccx and #vvb
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm
This is a howler: 9.9 CVSS remote code execution in #cisco #callmanager #cucm products 😬
Guess I’ll be updating our cluster tomorrow…
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. An attacker could exploit this vulnerability by sending a crafted message to a listening port of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the web services user. With access to the underlying operating system, the attacker could also establish root access on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm
So today’s amusing/interesting side gig has been helping spec a #CallManager install for….a yacht!
I know nothing more than that, but I’m guessing there’s a ridiculous amount of money involved for something that needs its own PBX 😎
Brandon Bennett
ij
Gary Parker