by Kastro
Paper/Archive/CVE-2025-20156

CVE-2025-20156

Cisco Cisco Meeting Management — Cisco Meeting Management Client-Server Privilege Escalation Vulnerability

EPSS 1%CVSS 9.9
critical.is priorityof 100
43
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 67.8.678 × 2013.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vulnerability exists because proper authorization is not enforced upon REST API users. An attacker could exploit this vulnerability by sending API requests to a specific endpoint. A successful exploit could allow the attacker to gain administrator-level control over edge nodes that are managed by Cisco Meeting Management.

Affected

ProductAffectedFixed inSource
Cisco Meeting ManagementCMM3.4.0–CNA
Cisco Meeting ManagementCMM3.2.0–CNA
Cisco Meeting ManagementCMM2.9.1–CNA
Cisco Meeting ManagementCMM2.9.0–CNA
Cisco Meeting ManagementCMM3.1.0–CNA
Cisco Meeting ManagementCMM3.5.0–CNA
Cisco Meeting ManagementCMM3.6.0–CNA
Cisco Meeting ManagementCMM3.6.1–CNA
Cisco Meeting ManagementCMM3.7.0–CNA
Cisco Meeting ManagementCMM3.8.0–CNA
Cisco Meeting ManagementCMM3.9.0–CNA

Scores by source

cisco (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-privesc-uy2Vf8pcrefblog.clamav.net/2025/01/clamav-142-and-108-security-patch.htmlrefsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-ole2-H549rphA