CVE-2025-20309

🗓️ 02 Jul 2025 16:39:40Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 87 Views

Vulnerability in Cisco Unified Communications Manager allows remote login via static root credentials.

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2025-20309	2 Jul 202516:39	–	attackerkb
BDU FSTEC	The vulnerability of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) systems, related to the use of static credentials, allows a perpetrator to gain access to the root account and execute arbitrary commands.	4 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-20309	2 Jul 202516:40	–	circl
Cisco	Cisco Unified Communications Manager Static SSH Credentials Vulnerability	2 Jul 202516:00	–	cisco
Tenable Nessus	Cisco Unified Communications Manager (CUCM) Static SSH Credentials (cisco-sa-cucm-ssh-m4UBdpE7)	4 Jul 202500:00	–	nessus
CNNVD	Cisco Unified Communications Manager 安全漏洞	2 Jul 202500:00	–	cnnvd
CNVD	Cisco Unified Communications Manager Static SSH Credentials Vulnerability	4 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-20309 Cisco Unified Communications Manager Static SSH Credentials Vulnerability	2 Jul 202516:39	–	cvelist
EUVD	EUVD-2025-19749	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in Cisco Unified Communications Manager	3 Jul 202507:43	–	ncsc

NVD

Node

cisco unified_communications_managerMatch15.0.1.13010-1-

cisco unified_communications_managerMatch15.0.1.13010-1session_management

cisco unified_communications_managerMatch15.0.1.13011-1-

cisco unified_communications_managerMatch15.0.1.13011-1session_management

cisco unified_communications_managerMatch15.0.1.13012-1-

cisco unified_communications_managerMatch15.0.1.13012-1session_management

cisco unified_communications_managerMatch15.0.1.13013-1-

cisco unified_communications_managerMatch15.0.1.13013-1session_management

cisco unified_communications_managerMatch15.0.1.13014-1-

cisco unified_communications_managerMatch15.0.1.13014-1session_management

cisco unified_communications_managerMatch15.0.1.13015-1-

cisco unified_communications_managerMatch15.0.1.13015-1session_management

cisco unified_communications_managerMatch15.0.1.13016-1-

cisco unified_communications_managerMatch15.0.1.13016-1session_management

cisco unified_communications_managerMatch15.0.1.13017-1-

cisco unified_communications_managerMatch15.0.1.13017-1session_management

[
  {
    "vendor": "Cisco",
    "product": "Cisco Unified Communications Manager",
    "versions": [
      {
        "version": "15.0.1.13010-1",
        "status": "affected"
      },
      {
        "version": "15.0.1.13011-1",
        "status": "affected"
      },
      {
        "version": "15.0.1.13012-1",
        "status": "affected"
      },
      {
        "version": "15.0.1.13013-1",
        "status": "affected"
      },
      {
        "version": "15.0.1.13014-1",
        "status": "affected"
      },
      {
        "version": "15.0.1.13015-1",
        "status": "affected"
      },
      {
        "version": "15.0.1.13016-1",
        "status": "affected"
      },
      {
        "version": "15.0.1.13017-1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]