# CVE-2025-20329: A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software…

Source: https://junglewise.ai/threats/cve-2025-20329-a-vulnerability-in-the-logging-component-of-cisco-telepresence  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-15  
License: CC BY 4.0 with a link back

CVE-2025-20329 · Severity: medium · CVSS 4.9 · Published 2025-10-15

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials.

This vulnerability exists because certain unencrypted credentials are stored when SIP media component logging is enabled. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials to which they may not normally have access. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII).
Note: To access the logs that are stored in the Webex Cloud or stored on the device itself, an attacker must have valid administrative credentials.

Technologies: [Cisco RoomOS](https://junglewise.ai/threats/technologies/roomos). Vendors: [Cisco](https://junglewise.ai/threats/vendors/cisco).

## Quick answers

**Is CVE-2025-20329 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-20329 being exploited in the wild.

**How severe is CVE-2025-20329?** Medium severity, with a CVSS score of 4.9, published 15 October 2025.

**Which products and versions are affected?** Cisco RoomOS, Cisco Telepresence Collaboration Endpoint. The advisory does not name versions.

**Is there a fix for CVE-2025-20329?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-20329?** Check whether you run Cisco RoomOS or Cisco Telepresence Collaboration Endpoint. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Cisco RoomOS
- Cisco Telepresence Collaboration Endpoint

## Related threats

- [Cisco RoomOS buffer overflow in USB driver](https://junglewise.ai/threats/cve-2026-20302-cisco-roomos-buffer-overflow-in-usb-driver)
- [Cisco RoomOS information disclosure in logging subsystem](https://junglewise.ai/threats/cve-2026-20289-cisco-roomos-information-disclosure-in-logging-subsystem)
- [Cisco RoomOS denial of service in exceptional condition handling](https://junglewise.ai/threats/cve-2026-20187-cisco-roomos-denial-of-service-in-exceptional-condition-handling)
- [Cisco RoomOS improper resource control denial of service](https://junglewise.ai/threats/cve-2026-20158-cisco-roomos-improper-resource-control-denial-of-service)
- [Cisco RoomOS missing encryption for sensitive data](https://junglewise.ai/threats/cve-2026-20157-cisco-roomos-missing-encryption-for-sensitive-data)