Product: Cisco Unified Communications Manager
Summary
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Software and Cisco Unified CM Session Management Edition Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery attack on an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-20326 |
Exploitation
To exploit this vulnerability, an attacker must convince a user with access to the web-based management interface to click on a malicious link. This link would trigger a CSRF attack, allowing the attacker to perform actions on the device with the privileges of the affected user. The attack requires user interaction, making it essential for the attacker to craft a convincing scenario to lure the user.
Affected Products
- Cisco Unified Communications Manager: Vulnerable due to insufficient CSRF protections in the web-based management interface.
- Cisco Unified CM Session Management Edition: Also affected by the same vulnerability in its management interface.
Mitigation
To mitigate this vulnerability, it is recommended to implement proper CSRF protections in the web-based management interface. Users should be educated about the risks of clicking on unknown links and should ensure that they are accessing the management interface securely. Regular updates and patches from Cisco should be applied to address vulnerabilities.