CVE-2025-20350

Medienbericht

EPSS 0.45%
Veröffentlicht 15.10.2025 16:15:10
Zuletzt bearbeitet 04.12.2025 21:29:46
Erkennungen
Login

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Denial of Service Vulnerability

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to a buffer overflow when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending crafted HTTP input to the device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Note: To exploit this vulnerability, the phone must be registered to Cisco Unified Communications Manager and have Web Access enabled. Web Access is disabled by default.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 67 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Desk Phone 9871 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9871 Version -

Cisco ≫ Desk Phone 9841 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9841 Version -

Cisco ≫ Desk Phone 9851 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9851 Version -

Cisco ≫ Desk Phone 9861 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9861 Version -

Cisco ≫ Ip Phone 8865 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8865 Version -

Cisco ≫ Ip Phone 8865 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8865 Version -

Cisco ≫ Ip Phone 8865 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8865 Version -

Cisco ≫ Ip Phone 7811 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7811 Version -

Cisco ≫ Ip Phone 7811 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 7811 Version -

Cisco ≫ Ip Phone 7811 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 7811 Version -

Cisco ≫ Ip Phone 7821 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7821 Version -

Cisco ≫ Ip Phone 7821 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 7821 Version -

Cisco ≫ Ip Phone 7821 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 7821 Version -

Cisco ≫ Ip Phone 7841 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7841 Version -

Cisco ≫ Ip Phone 7841 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 7841 Version -

Cisco ≫ Ip Phone 7841 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 7841 Version -

Cisco ≫ Ip Phone 7861 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7861 Version -

Cisco ≫ Ip Phone 7861 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 7861 Version -

Cisco ≫ Ip Phone 7861 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 7861 Version -

Cisco ≫ Ip Phone 8811 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8811 Version -

Cisco ≫ Ip Phone 8811 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8811 Version -

Cisco ≫ Ip Phone 8811 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8811 Version -

Cisco ≫ Ip Phone 8832 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8832 Version -

Cisco ≫ Ip Phone 8832 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8832 Version -

Cisco ≫ Ip Phone 8832 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8832 Version -

Cisco ≫ Ip Phone 8841 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8841 Version -

Cisco ≫ Ip Phone 8841 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8841 Version -

Cisco ≫ Ip Phone 8841 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8841 Version -

Cisco ≫ Ip Phone 8845 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8845 Version -

Cisco ≫ Ip Phone 8845 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8845 Version -

Cisco ≫ Ip Phone 8845 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8845 Version -

Cisco ≫ Ip Phone 8851 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8851 Version -

Cisco ≫ Ip Phone 8851 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8851 Version -

Cisco ≫ Ip Phone 8851 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8851 Version -

Cisco ≫ Ip Phone 8861 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8861 Version -

Cisco ≫ Ip Phone 8861 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8861 Version -

Cisco ≫ Ip Phone 8861 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8861 Version -

Cisco ≫ Video Phone 8875 Firmware Version < 2.3\(1\)

Cisco ≫ Video Phone 8875 Version -

Cisco ≫ Video Phone 8875 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Video Phone 8875 Version -

Cisco ≫ Video Phone 8875 Firmware Version 2.3(1)

Cisco ≫ Video Phone 8875 Version -

Cisco ≫ Video Phone 8875 Firmware Version 2.3(1) Update sr1

Cisco ≫ Video Phone 8875 Version -

Cisco ≫ Ip Phone 8821 Firmware Version < 11.0\(1\)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(0.7) Update mpp

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(2)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(2) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(2) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr3

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr4

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr5

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr6

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(4)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(4) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(4) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(4) Update sr3

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(5)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(5) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(5) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(5) Update sr3

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr4

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr5

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr6

Cisco ≫ Ip Phone 8821 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.45%	0.363

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

17.10.2025 11:43

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-FPyjLV7A

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-20350

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-20350

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-20350

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-20350