6.1

CVE-2025-20351

Medienbericht
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI.

This vulnerability exists because the web UI of an affected device does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Note: To exploit this vulnerability, the phone must be registered to Cisco Unified Communications Manager and have Web Access enabled. Web Access is disabled by default.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Desk Phone 9871 Firmware Version >= 3.0\(1\) <= 3.2\(1\)
   Cisco ≫ Desk Phone 9871 Version-
Cisco ≫ Desk Phone 9841 Firmware Version >= 3.0\(1\) <= 3.2\(1\)
   Cisco ≫ Desk Phone 9841 Version-
Cisco ≫ Desk Phone 9851 Firmware Version >= 3.0\(1\) <= 3.2\(1\)
   Cisco ≫ Desk Phone 9851 Version-
Cisco ≫ Desk Phone 9861 Firmware Version >= 3.0\(1\) <= 3.2\(1\)
   Cisco ≫ Desk Phone 9861 Version-
Cisco ≫ Ip Phone 8865 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 8865 Version-
Cisco ≫ Ip Phone 8865 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 8865 Version-
Cisco ≫ Ip Phone 8865 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 8865 Version-
Cisco ≫ Ip Phone 7811 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 7811 Version-
Cisco ≫ Ip Phone 7811 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 7811 Version-
Cisco ≫ Ip Phone 7811 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 7811 Version-
Cisco ≫ Ip Phone 7821 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 7821 Version-
Cisco ≫ Ip Phone 7821 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 7821 Version-
Cisco ≫ Ip Phone 7821 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 7821 Version-
Cisco ≫ Ip Phone 7841 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 7841 Version-
Cisco ≫ Ip Phone 7841 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 7841 Version-
Cisco ≫ Ip Phone 7841 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 7841 Version-
Cisco ≫ Ip Phone 7861 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 7861 Version-
Cisco ≫ Ip Phone 7861 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 7861 Version-
Cisco ≫ Ip Phone 7861 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 7861 Version-
Cisco ≫ Ip Phone 8811 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 8811 Version-
Cisco ≫ Ip Phone 8811 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 8811 Version-
Cisco ≫ Ip Phone 8811 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 8811 Version-
Cisco ≫ Ip Phone 8832 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 8832 Version-
Cisco ≫ Ip Phone 8832 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 8832 Version-
Cisco ≫ Ip Phone 8832 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 8832 Version-
Cisco ≫ Ip Phone 8841 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 8841 Version-
Cisco ≫ Ip Phone 8841 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 8841 Version-
Cisco ≫ Ip Phone 8841 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 8841 Version-
Cisco ≫ Ip Phone 8845 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 8845 Version-
Cisco ≫ Ip Phone 8845 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 8845 Version-
Cisco ≫ Ip Phone 8845 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 8845 Version-
Cisco ≫ Ip Phone 8851 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 8851 Version-
Cisco ≫ Ip Phone 8851 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 8851 Version-
Cisco ≫ Ip Phone 8851 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 8851 Version-
Cisco ≫ Ip Phone 8861 Firmware Version < 14.3\(1\)
   Cisco ≫ Ip Phone 8861 Version-
Cisco ≫ Ip Phone 8861 Firmware Version14.3(1)
   Cisco ≫ Ip Phone 8861 Version-
Cisco ≫ Ip Phone 8861 Firmware Version14.3(1) Updatesr1
   Cisco ≫ Ip Phone 8861 Version-
Cisco ≫ Ip Phone 8821 Firmware Version < 11.0\(1\)
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(0.7) Updatempp
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(2)
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(2) Updatesr1
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(2) Updatesr2
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(3)
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr1
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr2
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr3
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr4
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr5
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(3) Updatesr6
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(4)
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(4) Updatesr1
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(4) Updatesr2
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(4) Updatesr3
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(5)
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(5) Updatesr1
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(5) Updatesr2
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(5) Updatesr3
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(6)
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr1
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr2
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr4
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr5
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Ip Phone 8821 Firmware Version11.0(6) Updatesr6
   Cisco ≫ Ip Phone 8821 Version-
Cisco ≫ Video Phone 8875 Firmware Version < 2.3\(1\)
   Cisco ≫ Video Phone 8875 Version-
Cisco ≫ Video Phone 8875 Firmware Version >= 3.0\(1\) <= 3.2\(1\)
   Cisco ≫ Video Phone 8875 Version-
Cisco ≫ Video Phone 8875 Firmware Version2.3(1)
   Cisco ≫ Video Phone 8875 Version-
Cisco ≫ Video Phone 8875 Firmware Version2.3(1) Updatesr1
   Cisco ≫ Video Phone 8875 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.144
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@cisco.com 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.