Sensitive Information Disclosure in Cisco TelePresence Collaboration Endpoint and RoomOS Software

CVE-2025-20329

What is CVE-2025-20329?

A significant information disclosure vulnerability exists in the logging component of Cisco TelePresence Collaboration Endpoint and Cisco RoomOS Software. This flaw permits authenticated remote attackers to access sensitive information stored in clear text. If the SIP media component logging is enabled, certain credentials may be unencrypted and available in audit logs, potentially allowing unauthorized users to retrieve this data. Attackers must possess valid administrative credentials to exploit the vulnerability; however, successful exploitation can lead to exposure of confidential information, which may include personally identifiable information (PII). Proper security measures should be implemented to safeguard sensitive data.

References