CVE-2025-20350

Medienbericht

EPSS 0.09%
Veröffentlicht 15.10.2025 16:15:10
Zuletzt bearbeitet 04.12.2025 21:29:46
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to a buffer overflow when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending crafted HTTP input to the device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Note: To exploit this vulnerability, the phone must be registered to Cisco Unified Communications Manager and have Web Access enabled. Web Access is disabled by default.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

Diese Information steht angemeldeten Benutzern zur Verfügung.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Desk Phone 9871 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9871 Version-

Cisco ≫ Desk Phone 9841 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9841 Version-

Cisco ≫ Desk Phone 9851 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9851 Version-

Cisco ≫ Desk Phone 9861 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9861 Version-

Cisco ≫ Ip Phone 8865 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8865 Version-

Cisco ≫ Ip Phone 8865 Firmware Version14.3(1)

Cisco ≫ Ip Phone 8865 Version-

Cisco ≫ Ip Phone 8865 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 8865 Version-

Cisco ≫ Ip Phone 7811 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7811 Version-

Cisco ≫ Ip Phone 7811 Firmware Version14.3(1)

Cisco ≫ Ip Phone 7811 Version-

Cisco ≫ Ip Phone 7811 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 7811 Version-

Cisco ≫ Ip Phone 7821 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7821 Version-

Cisco ≫ Ip Phone 7821 Firmware Version14.3(1)

Cisco ≫ Ip Phone 7821 Version-

Cisco ≫ Ip Phone 7821 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 7821 Version-

Cisco ≫ Ip Phone 7841 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7841 Version-

Cisco ≫ Ip Phone 7841 Firmware Version14.3(1)

Cisco ≫ Ip Phone 7841 Version-

Cisco ≫ Ip Phone 7841 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 7841 Version-

Cisco ≫ Ip Phone 7861 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7861 Version-

Cisco ≫ Ip Phone 7861 Firmware Version14.3(1)

Cisco ≫ Ip Phone 7861 Version-

Cisco ≫ Ip Phone 7861 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 7861 Version-

Cisco ≫ Ip Phone 8811 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8811 Version-

Cisco ≫ Ip Phone 8811 Firmware Version14.3(1)

Cisco ≫ Ip Phone 8811 Version-

Cisco ≫ Ip Phone 8811 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 8811 Version-

Cisco ≫ Ip Phone 8832 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8832 Version-

Cisco ≫ Ip Phone 8832 Firmware Version14.3(1)

Cisco ≫ Ip Phone 8832 Version-

Cisco ≫ Ip Phone 8832 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 8832 Version-

Cisco ≫ Ip Phone 8841 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8841 Version-

Cisco ≫ Ip Phone 8841 Firmware Version14.3(1)

Cisco ≫ Ip Phone 8841 Version-

Cisco ≫ Ip Phone 8841 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 8841 Version-

Cisco ≫ Ip Phone 8845 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8845 Version-

Cisco ≫ Ip Phone 8845 Firmware Version14.3(1)

Cisco ≫ Ip Phone 8845 Version-

Cisco ≫ Ip Phone 8845 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 8845 Version-

Cisco ≫ Ip Phone 8851 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8851 Version-

Cisco ≫ Ip Phone 8851 Firmware Version14.3(1)

Cisco ≫ Ip Phone 8851 Version-

Cisco ≫ Ip Phone 8851 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 8851 Version-

Cisco ≫ Ip Phone 8861 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8861 Version-

Cisco ≫ Ip Phone 8861 Firmware Version14.3(1)

Cisco ≫ Ip Phone 8861 Version-

Cisco ≫ Ip Phone 8861 Firmware Version14.3(1) Updatesr1

Cisco ≫ Ip Phone 8861 Version-

Cisco ≫ Video Phone 8875 Firmware Version < 2.3\(1\)

Cisco ≫ Video Phone 8875 Version-

Cisco ≫ Video Phone 8875 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Video Phone 8875 Version-

Cisco ≫ Video Phone 8875 Firmware Version2.3(1)

Cisco ≫ Video Phone 8875 Version-

Cisco ≫ Video Phone 8875 Firmware Version2.3(1) Updatesr1

Cisco ≫ Video Phone 8875 Version-

Cisco ≫ Ip Phone 8821 Firmware Version < 11.0\(1\)

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(0.7) Updatempp

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(2)

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(2) Updatesr1

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(2) Updatesr2

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(3)

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr1

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr2

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr3

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr4

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr5

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr6

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(4)

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(4) Updatesr1

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(4) Updatesr2

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(4) Updatesr3

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(5)

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(5) Updatesr1

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(5) Updatesr2

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(5) Updatesr3

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(6)

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr1

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr2

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr4

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr5

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr6

Cisco ≫ Ip Phone 8821 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.258

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@cisco.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://www.heise.de/news/IP-Telefonie-Cisco-und-Ubiquiti-stellen-Sicherheits-Updates-bereit-10776154.html

Medienbericht

heise Security

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-FPyjLV7A

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-20350

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-20350

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-20350

EUVD