This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Cisco fixes 4 vulnerabilities in various products

Cisco fixes 4 vulnerabilities in various products [1][2][3][4]. Products and their fixed versions: Cisco Unified CM (SME) - 15SU3 (Jul 2025) [1] (or by applying the patch ciscocm.CSCwp27755_D0247-1.cop.sha512 available at [5]) Cisco BroadWorks Application Delivery Platform - RI.2025.05 [2] Cisco Spaces Connector - 3-Jun 2025 [3] Cisco ECE - 12.6(1)_ES11 [4]

Cisco Unified CM, Unified CM SME - hard-coded credentials (CVE-2025-20309)
CVSS 10.0 (Critical)

An unauthenticated remote attacker can gain access to the root account in Cisco Unified CM (SME) using hard-coded credentials [1].

The vulnerability is present in products:

  • Cisco Unified CM; >=15.0.1.13010-1, <15.0.1.13017-1;
  • Cisco Unified CM SME; >=15.0.1.13010-1, <15.0.1.13017-1;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X

More information:

The vulnerability was publicly disclosed 2. 7. 2025.

Cisco BroadWorks Application Delivery Platform - XSS (CVE-2025-20307)
CVSS 4.8 (Medium)

An authenticated remote attacker with administrator privileges can carry out an XSS attack against a user of the web interface in Cisco BroadWorks Application Delivery Platform [2].

The vulnerability is present in product:

  • Cisco BroadWorks Application Delivery Platform; <RI.2025.05;

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X

More information:

  • CVE-2025-20307 at cve.org, NVD
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org

The vulnerability was publicly disclosed 2. 7. 2025.

Cisco Spaces Connector - OS command injection (CVE-2025-20308)
CVSS 6.0 (Medium)

An authenticated local attacker with "spacesadmin" privileges can execute commands in the device's operating system with root privileges in Cisco Spaces Connector [3].

The vulnerability is present in product:

  • Cisco Spaces Connector; <3-Jun 2025;

CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:X/RL:X/RC:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X

More information:

  • CVE-2025-20308 at cve.org, NVD
  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') at cwe.mitre.org

The vulnerability was publicly disclosed 2. 7. 2025.

Cisco ECE - XSS (CVE-2025-20310)
CVSS 6.1 (Medium)

An unauthenticated remote attacker can, by means of social engineering, carry out a stored XSS attack in Cisco ECE. The vulnerability is exploitable only if the rich text content policy is disabled in the security policy for incoming emails. Instructions for verifying this setting can be found at [4].

The vulnerability is present in product:

  • Cisco Enterprise Chat and Email (ECE); >=15, <16; >=12, <12.6(1)_ES11;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X

More information:

  • CVE-2025-20310 at cve.org, NVD
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org

The vulnerability was publicly disclosed 2. 7. 2025.

By CESNET, z.s.p.o. Martin Krajči on 4. 7. 2025.

CESNET, z.s.p.o. Logo