Skip to content
OpenAdvisories
High WID-SEC-2025-1448 1 CVE

Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Erlangen von Administratorrechten

Published Jul 2, 2025 · Updated Jul 3, 2025 · Revision 2 · de-DE

Vendor: Cisco Product: Unified Communications Manager (CUCM)

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Unified Communications Manager (CUCM) ausnutzen, um Administratorrechte zu erlangen.

Product

Der Cisco Unified Communications Manager (CUCM, ehemals CallManager) dient zur Gesprächsvermittlung in IP-Telefonie-Netzen.

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-20309

    Cisco Unified Communications Manager Static SSH Credentials Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log in to an affected device using the root account, w…

    Cisco Cisco Unified Communications Manager Network devices

Revision history

  1. #2

    Präzisierung betroffene Versionen

  2. #1

    Initiale Fassung

References