The Akkadian Provisioning Manager, which is used as a third-party provisioning tool within Cisco Unified Communications environments, has three high-severity security vulnerabilities that can be chained together to enable remote code execution (RCE) with elevated privileges, researchers said. They remain unpatched, according to the researchers at Rapid7 who discovered them.

Read full article on Threat Post