CVE-2025-20329
published 2025-10-15CVE-2025-20329: A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote…
PriorityP429medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
EPSS
0.34%
26.0th percentile
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability exists because certain unencrypted credentials are stored when SIP media component logging is enabled. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials to which they may not normally have access. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII).
Note: To access the logs that are stored in the Webex Cloud or stored on the device itself, an attacker must have valid administrative credentials.
Affected
51 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
| cisco | cisco_roomos_software | — | — |
CVSS provenance
nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
vendor_cisco4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rvvf-ghr3-j46w: A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, rem
ghsa_unreviewed·2025-10-15
CVE-2025-20329 [MEDIUM] CWE-532 GHSA-rvvf-ghr3-j46w: A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, rem
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability exists because certain unencrypted credentials are stored when SIP media component logging is enabled. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials to which they may not normally have access. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII).
Note: To access th
Cisco
Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
vendor_cisco·2025-10-15·CVSS 4.9
CVE-2025-20329 [MEDIUM] CWE-532 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability exists because certain unencrypted credentials are stored when SIP media component logging is enabled. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials to which they may not normally have access. A successful exploit could allow the attacker to use those credentials to access confidential
Cisco
Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20329 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
CVE-2025-20329: Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability exists because certain unencrypted credentials are stored when SIP media component logging is enabled. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials to which they may not normally have access. A successful exploit could allow the attacker to use those credentials to access
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-15
Published