CRITICAL

CVE-2025-20309

Cisco Unified Communications Manager Static SSH Credentials Vulnerability

CVSS v3

CRITICAL

EPSS Score

1.1 %

exploit probability, as of 2026-09-25

CISA KEV

known exploited

Exploitation

none

SSVC status

Description

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the presence of static user credentials for the root account that are reserved for use during development. An attacker could exploit this

Technical details

Published: 2025-07-02
Last Modified: 2025-07-03

Frequently asked questions

What is CVE-2025-20309?

Is CVE-2025-20309 actively exploited?

Active exploitation of CVE-2025-20309 has not been confirmed. Its EPSS score was 1.1% on 2026-09-25, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2025-20309?

CVE-2025-20309 has a CVSS v3 base score of 10 (CRITICAL severity).

Is CVE-2025-20309 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IP Search CVEs SIEM & TIP integrations

No credit card required · 500 free checks/month · Free API key

Other 2025 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database