Source note · Unified CM security hardening
No workaround exists for CVE-2025-20309. The fix is Release 15SU3 (July 2025) or the COP patch file ciscocm.CSCwp27755_D0247-1.cop.sha512.
Checked 2026-09-25
There are no workarounds that address this vulnerability.
- Vendor
- Cisco
- Product
- Unified Communications Manager
- Subsystem
- PSIRT advisory
- Deployment
- on-premises
- Region
- not restricted
- Release range
- ES 15.0.1.13010-1 through 15.0.1.13017-1
- Checked
- 2026-09-25
Sources
- Cisco Unified Communications Manager Static SSH Credentials Vulnerability (cisco-sa-cucm-ssh-m4UBdpE7) — Cisco PSIRT · tier 2 current vendor documentation · Advisory > Workarounds; Fixed Software
Cite this note
APA
WarmTransfer. (2026, September 25). Unified CM security hardening: source note cucm-security-hardening-cve-2025-20309-fix. WarmTransfer. https://warmtransfer.net/knowledge/claims/cucm-security-hardening-cve-2025-20309-fix
BibTeX
@misc{warmtransfer-claim-cucm-security-hardening-cve-2025-20309-fix,
title = {Unified CM security hardening: source note cucm-security-hardening-cve-2025-20309-fix},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/cucm-security-hardening-cve-2025-20309-fix},
note = {Source note cucm-security-hardening-cve-2025-20309-fix, checked 2026-09-25}
}