CVE-2025-20329

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-20329
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability exists because certain unencrypted credentials are stored when SIP media component logging is enabled. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials to which they may not normally have access. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII). Note: To access the logs that are stored in the Webex Cloud or stored on the device itself, an attacker must have valid administrative credentials.

4.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-inf-disc-qGgsbxAm Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:telepresence_collaboration_endpoint:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*
History

08 Oct 2026, 11:10

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad en el componente de registro de Cisco TelePresence Collaboration Endpoint (CE) y el software Cisco RoomOS podría permitir a un atacante remoto y autenticado ver información sensible en texto claro en un sistema afectado. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas válidas. Esta vulnerabilidad existe porque ciertas credenciales no cifradas se almacenan cuando el registro del componente de medios SIP está habilitado. Un atacante podría explotar esta vulnerabilidad al acceder a los registros de auditoría en un sistema afectado y obtener credenciales a las que normalmente no tendrían acceso. Un exploit exitoso podría permitir al atacante usar esas credenciales para acceder a información confidencial, parte de la cual podría contener información de identificación personal (PII). Nota: Para acceder a los registros que se almacenan en la nube de Webex o en el propio dispositivo, un atacante debe tener credenciales administrativas válidas.
Information

Published : 2025-10-15 17:15

Updated : 2026-10-08 11:10

NVD link : CVE-2025-20329

Mitre link : CVE-2025-20329

CVE.ORG link : CVE-2025-20329

JSON object : View

Products Affected

cisco

  • roomos
  • telepresence_collaboration_endpoint
CWE
CWE-532

Insertion of Sensitive Information into Log File