05-21-2025 09:26 PM
10-20-2025 11:29 AM
Dear Nishant MS,
Is there a CVE number or a CDETS associated to this concern?
Sincerely,
Marco R.
10-20-2025 12:28 PM
Hello @Nisanth MS,
it is very easy for security teams to launch such requests but you might end up explaining them why they have to accept these issues.
Yes, the CUCM 15.x releases do not only support TLS v1.2 but also v1.3 and Cisco released COP files for older versions that enable TLS enforcement. It is also possible to restrict SSH algorithms, e.g. by disabling legacy SHA-1 suites.
!!! BUT !!!
Doing this can easily break things so you need to carefully check all TLS flows and components. For example, disabling TLS 1.0/1.1 might affect older Cisco IP phones, Jabber builds, or CTI integrations.
Take a look at the following thread to get an idea what such changes might involve:
HTH!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide