{"id":79392,"date":"2025-07-07T10:40:45","date_gmt":"2025-07-07T07:10:45","guid":{"rendered":"https:\/\/falnic.com\/blog\/?p=79392"},"modified":"2025-11-16T16:54:19","modified_gmt":"2025-11-16T13:24:19","slug":"cisco-found-maximum-severity-flaw-in-cisco-cucm","status":"publish","type":"post","link":"https:\/\/falnic.com\/blog\/cisco-found-maximum-severity-flaw-in-cisco-cucm.html","title":{"rendered":"\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u062c\u062f\u06cc \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0633\u06cc\u0633\u06a9\u0648 CUCM"},"content":{"rendered":"<figure class=\"wp-block-post-featured-image\"><img loading=\"lazy\" decoding=\"async\" width=\"694\" height=\"332\" src=\"https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-found-maximum-severity-flaw-in-cisco-cucm.webp\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image no-lazy\" alt=\"\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u062c\u062f\u06cc \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0633\u06cc\u0633\u06a9\u0648 CUCM\" style=\"object-fit:cover;\" srcset=\"https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-found-maximum-severity-flaw-in-cisco-cucm.webp 694w, https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-found-maximum-severity-flaw-in-cisco-cucm-300x144.webp 300w, https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-found-maximum-severity-flaw-in-cisco-cucm-150x72.webp 150w, https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-found-maximum-severity-flaw-in-cisco-cucm-220x105.webp 220w, https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-found-maximum-severity-flaw-in-cisco-cucm-390x187.webp 390w\" sizes=\"auto, (max-width: 694px) 100vw, 694px\" \/><\/figure>\n\n\n<p>\u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0628\u0647\u200c\u062a\u0627\u0632\u06af\u06cc \u06cc\u06a9 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u00ab\u062f\u0631 \u067e\u0634\u062a\u06cc (Back Door)\u00bb \u0631\u0627 \u062f\u0631 \u06cc\u06a9\u06cc \u062f\u06cc\u06af\u0631 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u062e\u0648\u062f \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-20309 \u0645\u0639\u0631\u0641\u06cc \u0634\u062f\u0647\u060c \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0648\u062c\u0648\u062f \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648\u0631\u0648\u062f \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0631\u0627\u06cc \u062d\u0633\u0627\u0628 \u0627\u0635\u0644\u06cc (root) \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0648 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0648\u0627\u0631\u062f \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627\u06cc Cisco Unified Communications Manager (Unified CM) \u0648 Cisco Unified Communications Manager Session Management Edition (Unified CM SME) \u0634\u0648\u0646\u062f. \u0627\u06cc\u0646 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0648\u0631\u0648\u062f \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647\u200c\u062f\u0633\u062a \u0622\u0645\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u0627 \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc (\u0633\u0637\u062d root) \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u062f\u0631\u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-20309 \u0648 \u0646\u062d\u0648\u0647 \u0631\u0641\u0639 \u0622\u0646 \u062f\u0631 \u0633\u06cc\u0633\u06a9\u0648 CUCM<\/h2>\n\n\n\n<p>\u062d\u062f\u0648\u062f \u0645\u0627\u0647 \u06af\u0630\u0634\u062a\u0647\u060c \u0633\u06cc\u0633\u06a9\u0648 \u062f\u0631 <a href=\"https:\/\/falnic.com\/blog\/what-is-new-in-cisco-live-2025.html\" target=\"_blank\" rel=\"noreferrer noopener\">\u0631\u0648\u06cc\u062f\u0627\u062f \u0633\u06cc\u0633\u06a9\u0648 \u0644\u0627\u06cc\u0648 2025<\/a> \u062a\u0623\u06a9\u06cc\u062f \u0632\u06cc\u0627\u062f\u06cc \u0631\u0648\u06cc \u0645\u0628\u062d\u062b \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f \u0648 \u0628\u062e\u0634 \u0646\u0633\u0628\u062a\u0627\u064b \u0632\u06cc\u0627\u062f\u06cc \u0627\u0632 \u0632\u0645\u0627\u0646 \u0627\u06cc\u0646 \u0631\u0648\u06cc\u062f\u0627\u062f \u0631\u0627 \u0628\u0647 \u0645\u0639\u0631\u0641\u06cc \u0646\u0648\u0622\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u0627\u06cc\u0646 \u0632\u0645\u06cc\u0646\u0647 \u0627\u062e\u062a\u0635\u0627\u0635 \u062f\u0627\u062f. \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0628\u0627\u0639\u062b \u0634\u062f \u062a\u0627 \u0627\u0646\u062a\u0638\u0627\u0631\u0647\u0627 \u0627\u0632 \u0633\u06cc\u0633\u06a9\u0648 \u062f\u0631 \u0631\u0627\u0628\u0637\u0647 \u0628\u0627 \u062a\u0623\u0645\u06cc\u0646 \u0627\u0645\u0646\u06cc\u062a \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u062e\u0648\u062f \u062f\u0631 \u0645\u0642\u0627\u0628\u0644 \u062d\u0645\u0644\u0627\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0628\u0647\u200c\u062e\u0635\u0648\u0635 \u062a\u0647\u062f\u06cc\u062f\u0627\u062a \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc\u060c \u0628\u06cc\u0634\u062a\u0631 \u0627\u0632 \u0642\u0628\u0644 \u0628\u0627\u0644\u0627 \u0628\u0631\u0648\u062f!<\/p>\n\n\n\n<p>\u067e\u0644\u062a\u0641\u0631\u0645 Cisco Unified Communications Manager \u06a9\u0647 \u067e\u06cc\u0634\u200c\u062a\u0631 \u0628\u0627 \u0646\u0627\u0645 Cisco CallManager \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u062f\u060c \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 \u067e\u0631\u062f\u0627\u0632\u0634 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 IP \u0627\u0633\u062a. \u0646\u0633\u062e\u0647 Session Management Edition \u0627\u06cc\u0646 \u067e\u0644\u062a\u0641\u0631\u0645 \u0646\u06cc\u0632 \u0631\u0648\u06cc \u0633\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u062a\u062c\u0645\u06cc\u0639 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u062a\u0645\u0631\u06a9\u0632 \u062f\u0627\u0631\u062f \u0648 \u0627\u0645\u06a9\u0627\u0646\u0627\u062a \u0644\u0627\u0632\u0645 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0646\u0634\u0633\u062a\u200c\u0647\u0627 \u0648 \u062a\u0648\u0633\u0639\u0647 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0647\u0645\u06a9\u0627\u0631\u06cc \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u0622\u0648\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627 \u062f\u0631 \u06a9\u0633\u0628\u200c\u0648\u06a9\u0627\u0631\u0647\u0627\u06cc \u0645\u062a\u0646\u0648\u0639 \u0628\u0627 \u0627\u0646\u062f\u0627\u0632\u0647\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f \u0648 \u0647\u0645 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0645\u062d\u0644\u06cc (On-premises) \u0648 \u0647\u0645 \u0627\u0628\u0631\u06cc \u0642\u0627\u0628\u0644 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0647\u0633\u062a\u0646\u062f.<\/p>\n\n\n\n<p>\u0633\u06cc\u0633\u06a9\u0648 \u062f\u0631 \u0631\u0627\u0628\u0637\u0647 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-20309 \u06a9\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627 \u0645\u0631\u0628\u0648\u0637 \u0627\u0633\u062a\u060c \u0686\u0646\u06cc\u0646 \u062a\u0648\u0636\u06cc\u062d \u062f\u0627\u062f\u0647 \u0627\u0633\u062a:<\/p>\n\n\n\n<p>\u00ab\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-20309 \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0648\u062c\u0648\u062f \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062b\u0627\u0628\u062a \u0648 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0631\u0627\u06cc \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc root \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0622\u0646 \u0635\u0631\u0641\u0627\u064b \u062f\u0631 \u0637\u0648\u0644 \u0641\u0631\u0622\u06cc\u0646\u062f \u062a\u0648\u0633\u0639\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f\u00bb.<\/p>\n\n\n\n<p>\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0648\u0631\u062f \u0627\u0634\u0627\u0631\u0647 \u0633\u06cc\u0633\u06a9\u0648\u060c \u0642\u0627\u0628\u0644 \u062a\u063a\u06cc\u06cc\u0631 \u06cc\u0627 \u062d\u0630\u0641 \u0646\u06cc\u0633\u062a\u0646\u062f. \u062e\u0648\u0634\u0628\u062e\u062a\u0627\u0646\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0637\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0627\u062e\u0644\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0646\u0634\u0627\u0646\u0647\u200c\u0627\u06cc \u0645\u0628\u0646\u06cc \u0628\u0631 \u06a9\u0634\u0641 \u06cc\u0627 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0646 \u06af\u0632\u0627\u0631\u0634 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"694\" height=\"332\" src=\"https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-fixes-cve-2025-20309-in-cucm-platform.webp\" alt=\"\u0631\u0648\u0634 \u0631\u0641\u0639 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-20309 \u062f\u0631 \u0633\u06cc\u0633\u06a9\u0648 CUCM\" class=\"wp-image-79394\" title=\"\u0633\u06cc\u0633\u06a9\u0648 \u0631\u0648\u0634 \u0631\u0641\u0639 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-20309 \u062f\u0631 \u0633\u06cc\u0633\u06a9\u0648 CUCM \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u062f\u0627\u062f\u0647 \u0648 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062e\u0648\u0627\u0633\u062a\u0647 \u062a\u0627 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u062e\u0648\u062f \u0631\u0627 \u0622\u067e\u062f\u06cc\u062a \u06a9\u0646\u0646\u062f \u06cc\u0627 \u067e\u0686 \u062c\u062f\u06cc\u062f \u0633\u06cc\u0633\u06a9\u0648 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\" srcset=\"https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-fixes-cve-2025-20309-in-cucm-platform.webp 694w, https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-fixes-cve-2025-20309-in-cucm-platform-300x144.webp 300w, https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-fixes-cve-2025-20309-in-cucm-platform-150x72.webp 150w, https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-fixes-cve-2025-20309-in-cucm-platform-220x105.webp 220w, https:\/\/falnic.com\/blog\/wp-content\/uploads\/2025\/07\/cisco-fixes-cve-2025-20309-in-cucm-platform-390x187.webp 390w\" sizes=\"auto, (max-width: 694px) 100vw, 694px\" \/><\/figure>\n<\/div>\n\n\n<p>\u0646\u06a9\u062a\u0647\u200c\u0627\u06cc \u06a9\u0647 \u0628\u0647 \u0627\u062d\u062a\u0645\u0627\u0644 \u0632\u06cc\u0627\u062f \u0628\u0627\u0639\u062b \u06a9\u0627\u0647\u0634 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0634\u062f\u0647\u060c \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u062a\u0646\u0647\u0627 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0635\u06cc \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0633\u06cc\u0633\u06a9\u0648 CUCM \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0622\u0646 \u0647\u0633\u062a\u0646\u062f. \u0628\u0647\u200c\u0637\u0648\u0631 \u062f\u0642\u06cc\u0642\u200c\u062a\u0631 \u0628\u0627\u06cc\u062f \u06af\u0641\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647 15.0.1.13010-1 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 Cisco Unified CM \u0648 \u0646\u0633\u062e\u0647 15.0.1.13017-1 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 Cisco Unified CM SME \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a\u061b \u0622\u0646 \u0647\u0645 \u0641\u0642\u0637 \u062f\u0631 \u0642\u0627\u0644\u0628 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc Engineering Special\u060c \u06a9\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc\u06cc \u0645\u062d\u062f\u0648\u062f \u0648 \u0645\u062e\u0635\u0648\u0635 \u0631\u0641\u0639 \u0645\u0634\u06a9\u0644 \u0647\u0633\u062a\u0646\u062f \u0648 \u0641\u0642\u0637 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u06a9\u0632 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0641\u0646\u06cc \u0633\u06cc\u0633\u06a9\u0648 (TAC) \u062a\u0648\u0632\u06cc\u0639 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u06cc\u0646 \u0645\u0648\u0627\u0631\u062f \u0628\u0627\u0639\u062b \u0634\u062f\u0647 \u062a\u0627 \u0627\u062d\u062a\u0645\u0627\u0644 \u067e\u062e\u0634 \u0634\u062f\u0646 \u06af\u0633\u062a\u0631\u062f\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0627\u0647\u0634 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p>\u0633\u06cc\u0633\u06a9\u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u0627\u06af\u0631 \u062f\u0631 \u0644\u0627\u06af \u0633\u06cc\u0633\u062a\u0645 \u06cc\u06a9 \u0648\u0631\u0648\u062f\u06cc \u062e\u0627\u0635 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0628\u0647 \u0627\u062d\u062a\u0645\u0627\u0644 \u0632\u06cc\u0627\u062f \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0633\u06cc\u0633\u06a9\u0648 \u062f\u0631 \u0635\u0641\u062d\u0647 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062a\u0648\u0636\u06cc\u062d \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 <a href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-cucm-ssh-m4UBdpE7\" target=\"_blank\" rel=\"noreferrer noopener\">Cisco Security Advisory<\/a> \u0686\u0646\u06cc\u0646 \u062a\u0648\u0636\u06cc\u062d \u062f\u0627\u062f\u0647 \u0627\u0633\u062a:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Successful exploitation would result in a log entry to \/var\/log\/active\/syslog\/secure for the root user with root permissions. If a log entry both includes sshd and shows a successful SSH login by the user root, it is an IoC.<\/p>\n\n\n\n<p>\u00ab\u062f\u0631 \u0635\u0648\u0631\u062a \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0648\u0641\u0642\u060c \u06cc\u06a9 \u0644\u0627\u06af \u062f\u0631 \u0645\u0633\u06cc\u0631 \/var\/log\/active\/syslog\/secure \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 root \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u062b\u0628\u062a \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u06af\u0631 \u06cc\u06a9 \u0644\u0627\u06af \u0648\u0631\u0648\u062f\u06cc \u0647\u0645 \u0634\u0627\u0645\u0644 sshd \u0628\u0627\u0634\u062f \u0648 \u0647\u0645 \u06cc\u06a9 \u0648\u0631\u0648\u062f \u0645\u0648\u0641\u0642 SSH \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631 root \u0631\u0627 \u0646\u0634\u0627\u0646 \u062f\u0647\u062f\u060c \u0628\u0627\u06cc\u062f \u0622\u0646 \u0631\u0627 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u00ab\u0646\u0634\u0627\u0646\u0647 \u0646\u0641\u0648\u0630\u00bb \u062a\u0644\u0642\u06cc \u06a9\u0631\u062f \u0648 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0631\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062c\u062f\u06cc \u06af\u0631\u0641\u062a\u00bb.<\/p>\n<\/blockquote>\n\n\n\n<p>\u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u062f\u0631 \u0645\u0639\u0631\u0636 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f\u060c \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u062a\u0627 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0633\u06cc\u0633\u06a9\u0648 CUCM \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 15 Service Update (SU) 3 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f \u06cc\u0627 \u0641\u0627\u06cc\u0644 \u067e\u0686 \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0633\u06cc\u0633\u06a9\u0648 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f. \u0647\u06cc\u0686 \u0631\u0627\u0647\u200c\u062d\u0644 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u062f\u06cc\u06af\u0631\u06cc \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f.<\/p>\n\n\n<div class=\"kk-star-ratings kksr-auto kksr-align-left kksr-valign-bottom\"\n    data-payload='{&quot;align&quot;:&quot;left&quot;,&quot;id&quot;:&quot;79392&quot;,&quot;slug&quot;:&quot;default&quot;,&quot;valign&quot;:&quot;bottom&quot;,&quot;ignore&quot;:&quot;&quot;,&quot;reference&quot;:&quot;auto&quot;,&quot;class&quot;:&quot;&quot;,&quot;count&quot;:&quot;1&quot;,&quot;legendonly&quot;:&quot;&quot;,&quot;readonly&quot;:&quot;&quot;,&quot;score&quot;:&quot;5&quot;,&quot;starsonly&quot;:&quot;&quot;,&quot;best&quot;:&quot;5&quot;,&quot;gap&quot;:&quot;4&quot;,&quot;greet&quot;:&quot;post&quot;,&quot;legend&quot;:&quot;5\\\/5 - (1 \u0627\u0645\u062a\u06cc\u0627\u0632)&quot;,&quot;size&quot;:&quot;20&quot;,&quot;title&quot;:&quot;\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u062c\u062f\u06cc \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0633\u06cc\u0633\u06a9\u0648 CUCM&quot;,&quot;width&quot;:&quot;118&quot;,&quot;_legend&quot;:&quot;{score}\\\/{best} - ({count} \u0627\u0645\u062a\u06cc\u0627\u0632)&quot;,&quot;font_factor&quot;:&quot;1.25&quot;}'>\n            \n<div class=\"kksr-stars\">\n    \n<div class=\"kksr-stars-inactive\">\n            <div class=\"kksr-star\" data-star=\"1\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"2\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"3\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"4\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"5\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n    <\/div>\n    \n<div class=\"kksr-stars-active\" style=\"width: 118px;\">\n            <div class=\"kksr-star\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-left: 4px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 20px; height: 20px;\"><\/div>\n        <\/div>\n    <\/div>\n<\/div>\n                \n\n<div class=\"kksr-legend\" style=\"font-size: 16px;\">\n            5\/5 - (1 \u0627\u0645\u062a\u06cc\u0627\u0632)    <\/div>\n    <\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0628\u0647\u200c\u062a\u0627\u0632\u06af\u06cc \u06cc\u06a9 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u00ab\u062f\u0631 \u067e\u0634\u062a\u06cc (Back Door)\u00bb \u0631\u0627 \u062f\u0631 \u06cc\u06a9\u06cc \u062f\u06cc\u06af\u0631 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u062e\u0648\u062f \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-20309 \u0645\u0639\u0631\u0641\u06cc \u0634\u062f\u0647\u060c \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0648\u062c\u0648\u062f \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648\u0631\u0648\u062f \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0631\u0627\u06cc \u062d\u0633\u0627\u0628 \u0627\u0635\u0644\u06cc (root) \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0648 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0648\u0627\u0631\u062f &hellip;<\/p>\n","protected":false},"author":72,"featured_media":79393,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-79392","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/posts\/79392","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/users\/72"}],"replies":[{"embeddable":true,"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/comments?post=79392"}],"version-history":[{"count":1,"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/posts\/79392\/revisions"}],"predecessor-version":[{"id":86241,"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/posts\/79392\/revisions\/86241"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/media\/79393"}],"wp:attachment":[{"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/media?parent=79392"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/categories?post=79392"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/falnic.com\/blog\/wp-json\/wp\/v2\/tags?post=79392"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}