CVE-2025-20329 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
An authenticated admin can view sensitive credentials in clear text logs when SIP media logging is enabled, potentially exposing PII.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-20329?
CVE-2025-20329 is a medium-severity vulnerability in Cisco RoomOS Software, published on 15 Oct 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability exists because certain unencrypted credentials are stored when SIP media component logging is enabled. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials to which they may not normally have access. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII). Note: To access the logs that are stored in the Webex Cloud or stored on the device itself, an attacker must have valid administrative credentials.
Weakness: CWE-532
Which versions are affected by CVE-2025-20329?
It affects 2 products.
Products include Cisco Roomos, Cisco Telepresence Collaboration Endpoint.
How do I fix CVE-2025-20329?
No fix has been published for CVE-2025-20329 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-20329 being exploited?
There is no known exploitation of CVE-2025-20329 in the wild and no public exploit code.
Other vulnerabilities in Cisco RoomOS Software
- CVE-2026-20150 Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities
- CVE-2019-15288 Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability
- CVE-2026-20156 Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities
- CVE-2026-20153 Cisco RoomOS Security Hardening Release - Input Validation Vulnerabilities
- CVE-2026-20157 Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities
Sources
Also known as GHSA-rvvf-ghr3-j46w.