CVE-2025-20351

Medienbericht

EPSS 0.27%
Veröffentlicht 15.10.2025 16:15:18
Zuletzt bearbeitet 04.12.2025 21:26:51
Erkennungen
Login

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Cross-Site Scripting Vulnerability

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI.

This vulnerability exists because the web UI of an affected device does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Note: To exploit this vulnerability, the phone must be registered to Cisco Unified Communications Manager and have Web Access enabled. Web Access is disabled by default.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 67 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Desk Phone 9871 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9871 Version -

Cisco ≫ Desk Phone 9841 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9841 Version -

Cisco ≫ Desk Phone 9851 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9851 Version -

Cisco ≫ Desk Phone 9861 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Desk Phone 9861 Version -

Cisco ≫ Ip Phone 8865 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8865 Version -

Cisco ≫ Ip Phone 8865 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8865 Version -

Cisco ≫ Ip Phone 8865 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8865 Version -

Cisco ≫ Ip Phone 7811 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7811 Version -

Cisco ≫ Ip Phone 7811 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 7811 Version -

Cisco ≫ Ip Phone 7811 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 7811 Version -

Cisco ≫ Ip Phone 7821 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7821 Version -

Cisco ≫ Ip Phone 7821 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 7821 Version -

Cisco ≫ Ip Phone 7821 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 7821 Version -

Cisco ≫ Ip Phone 7841 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7841 Version -

Cisco ≫ Ip Phone 7841 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 7841 Version -

Cisco ≫ Ip Phone 7841 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 7841 Version -

Cisco ≫ Ip Phone 7861 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 7861 Version -

Cisco ≫ Ip Phone 7861 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 7861 Version -

Cisco ≫ Ip Phone 7861 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 7861 Version -

Cisco ≫ Ip Phone 8811 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8811 Version -

Cisco ≫ Ip Phone 8811 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8811 Version -

Cisco ≫ Ip Phone 8811 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8811 Version -

Cisco ≫ Ip Phone 8832 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8832 Version -

Cisco ≫ Ip Phone 8832 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8832 Version -

Cisco ≫ Ip Phone 8832 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8832 Version -

Cisco ≫ Ip Phone 8841 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8841 Version -

Cisco ≫ Ip Phone 8841 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8841 Version -

Cisco ≫ Ip Phone 8841 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8841 Version -

Cisco ≫ Ip Phone 8845 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8845 Version -

Cisco ≫ Ip Phone 8845 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8845 Version -

Cisco ≫ Ip Phone 8845 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8845 Version -

Cisco ≫ Ip Phone 8851 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8851 Version -

Cisco ≫ Ip Phone 8851 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8851 Version -

Cisco ≫ Ip Phone 8851 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8851 Version -

Cisco ≫ Ip Phone 8861 Firmware Version < 14.3\(1\)

Cisco ≫ Ip Phone 8861 Version -

Cisco ≫ Ip Phone 8861 Firmware Version 14.3(1)

Cisco ≫ Ip Phone 8861 Version -

Cisco ≫ Ip Phone 8861 Firmware Version 14.3(1) Update sr1

Cisco ≫ Ip Phone 8861 Version -

Cisco ≫ Ip Phone 8821 Firmware Version < 11.0\(1\)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(0.7) Update mpp

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(2)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(2) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(2) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr3

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr4

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr5

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(3) Update sr6

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(4)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(4) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(4) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(4) Update sr3

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(5)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(5) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(5) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(5) Update sr3

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6)

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr1

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr2

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr4

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr5

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Ip Phone 8821 Firmware Version 11.0(6) Update sr6

Cisco ≫ Ip Phone 8821 Version -

Cisco ≫ Video Phone 8875 Firmware Version < 2.3\(1\)

Cisco ≫ Video Phone 8875 Version -

Cisco ≫ Video Phone 8875 Firmware Version >= 3.0\(1\) <= 3.2\(1\)

Cisco ≫ Video Phone 8875 Version -

Cisco ≫ Video Phone 8875 Firmware Version 2.3(1)

Cisco ≫ Video Phone 8875 Version -

Cisco ≫ Video Phone 8875 Firmware Version 2.3(1) Update sr1

Cisco ≫ Video Phone 8875 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.185

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	6.1	2.8	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

17.10.2025 11:43

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-FPyjLV7A

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-20351

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-20351

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-20351

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-20351