Improper authentication weaknesses in Cisco Unified Communications products allow attackers to bypass normal login procedures, potentially gaining unauthorized access to system resources, configuration data, or control channels. The vulnerability falls under CWE-287 and can enable privilege escalation or unauthorized use of the communications platform.

Cisco products affected include the Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM and Presence Service, and Cisco Unity Connection. No specific version ranges were disclosed in the advisory.

The CVSS base score of 9.8 reflects a critical severity and indicates that the vulnerability can be exploited remotely to gain unauthorized access. While an EPSS score is not provided, the lack of listing in the CISA KEV catalog does not diminish the potential for active exploitation; the attack likely leverages network connectivity and existing authentication interfaces exposed by the affected services.