Vulnslist

find the latest Cisco vulnerabilities

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Vulnerabilities

cisco-sa-phone-write-g3kcC5Df · Medium · Published · Updated

Multiple vulnerabilities in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 with Cisco Session Initiation Protocol (SIP) Software could allow an unauthenticated, remote attacker to conduct arbitrary file write and information disclosure attacks on an affected device. Note: To exploit these vulnerabilities, Web Access must be enabled on the phone. Web Access is disabled by default. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2025-20335, CVE-2025-20336
Cisco Bug IDsCSCwn55710, CSCwn55727, CSCwn55709, CSCwn55725, CSCwn55728, CSCwn55726, CSCwn55712, CSCwn51679, CSCwn55714, CSCwn52910, CSCwn52921, CSCwn52909, CSCwn52919, CSCwn52920, CSCwn52922, CSCwn52911, CSCwn51677, CSCwn52913
CVSS ScoreBase 5.3
Base 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:X
Base 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Session Initiation Protocol (SIP) Software

CSAF Product Statuses

Product Status Source CVE Rows
Cisco Session Initiation Protocol (SIP) Software known_affected cisco_csaf CVE-2025-20335, CVE-2025-20336 2

Related Products

Product CVE Evidence
Cisco IP phone CVE-2025-20335 Cisco OpenVuln
Cisco Session Initiation Protocol (SIP) Software CVE-2025-20335 Cisco CSAF
Cisco 8000 Series Routers CVE-2025-20335 Cisco OpenVuln
Cisco IP phone CVE-2025-20336 Cisco OpenVuln
Cisco Session Initiation Protocol (SIP) Software CVE-2025-20336 Cisco CSAF
Cisco 8000 Series Routers CVE-2025-20336 Cisco OpenVuln