A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.
This vulnerability is due to a buffer overflow when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending crafted HTTP input to the device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Note: To exploit this vulnerability, the phone must be registered to Cisco Unified Communications Manager and have Web Access enabled. Web Access is disabled by default.
Metrics
Affected Vendors & Products
References
History
Thu, 04 Dec 2025 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Cisco desk Phone 9841
Cisco desk Phone 9841 Firmware Cisco desk Phone 9851 Cisco desk Phone 9851 Firmware Cisco desk Phone 9861 Cisco desk Phone 9861 Firmware Cisco desk Phone 9871 Cisco desk Phone 9871 Firmware Cisco ip Phone 7811 Cisco ip Phone 7811 Firmware Cisco ip Phone 7821 Cisco ip Phone 7821 Firmware Cisco ip Phone 7841 Cisco ip Phone 7841 Firmware Cisco ip Phone 7861 Cisco ip Phone 7861 Firmware Cisco ip Phone 8811 Cisco ip Phone 8811 Firmware Cisco ip Phone 8821 Cisco ip Phone 8821 Firmware Cisco ip Phone 8832 Cisco ip Phone 8832 Firmware Cisco ip Phone 8841 Cisco ip Phone 8841 Firmware Cisco ip Phone 8845 Cisco ip Phone 8845 Firmware Cisco ip Phone 8851 Cisco ip Phone 8851 Firmware Cisco ip Phone 8861 Cisco ip Phone 8861 Firmware Cisco ip Phone 8865 Cisco ip Phone 8865 Firmware Cisco video Phone 8875 Firmware |
|
| CPEs | cpe:2.3:h:cisco:desk_phone_9841:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:desk_phone_9851:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:desk_phone_9861:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:desk_phone_9871:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_8821:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_8832:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:* cpe:2.3:o:cisco:desk_phone_9841_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:desk_phone_9851_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:desk_phone_9861_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:desk_phone_9871_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7811_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7811_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7821_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7821_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7841_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7841_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7861_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_7861_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8811_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8811_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(0.7\):mpp:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(2\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(2\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(2\):sr2:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(3\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(3\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(3\):sr2:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(3\):sr3:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(3\):sr4:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(3\):sr5:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(3\):sr6:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(4\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(4\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(4\):sr2:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(4\):sr3:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(5\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(5\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(5\):sr2:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(5\):sr3:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(6\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(6\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(6\):sr2:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(6\):sr4:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(6\):sr5:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\(6\):sr6:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8832_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8832_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8832_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8841_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8841_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8845_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8845_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8851_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8851_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8861_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8861_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8865_firmware:14.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:ip_phone_8865_firmware:14.3\(1\):sr1:*:*:*:*:*:* cpe:2.3:o:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\(1\):*:*:*:*:*:*:* cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\(1\):sr1:*:*:*:*:*:* |
|
| Vendors & Products |
Cisco desk Phone 9841
Cisco desk Phone 9841 Firmware Cisco desk Phone 9851 Cisco desk Phone 9851 Firmware Cisco desk Phone 9861 Cisco desk Phone 9861 Firmware Cisco desk Phone 9871 Cisco desk Phone 9871 Firmware Cisco ip Phone 7811 Cisco ip Phone 7811 Firmware Cisco ip Phone 7821 Cisco ip Phone 7821 Firmware Cisco ip Phone 7841 Cisco ip Phone 7841 Firmware Cisco ip Phone 7861 Cisco ip Phone 7861 Firmware Cisco ip Phone 8811 Cisco ip Phone 8811 Firmware Cisco ip Phone 8821 Cisco ip Phone 8821 Firmware Cisco ip Phone 8832 Cisco ip Phone 8832 Firmware Cisco ip Phone 8841 Cisco ip Phone 8841 Firmware Cisco ip Phone 8845 Cisco ip Phone 8845 Firmware Cisco ip Phone 8851 Cisco ip Phone 8851 Firmware Cisco ip Phone 8861 Cisco ip Phone 8861 Firmware Cisco ip Phone 8865 Cisco ip Phone 8865 Firmware Cisco video Phone 8875 Firmware |
Tue, 21 Oct 2025 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Cisco
Cisco ip Phone 7800 Cisco ip Phone 8800 Cisco ip Phone 8800 Series Cisco session Initiation Protocol (sip) Firmware Cisco video Phone 8875 |
|
| Vendors & Products |
Cisco
Cisco ip Phone 7800 Cisco ip Phone 8800 Cisco ip Phone 8800 Series Cisco session Initiation Protocol (sip) Firmware Cisco video Phone 8875 |
Wed, 15 Oct 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 15 Oct 2025 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to a buffer overflow when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending crafted HTTP input to the device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: To exploit this vulnerability, the phone must be registered to Cisco Unified Communications Manager and have Web Access enabled. Web Access is disabled by default. | |
| Title | Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Denial of Service Vulnerability | |
| Weaknesses | CWE-121 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: cisco
Published: 2025-10-15T16:15:10.244Z
Updated: 2025-10-15T17:42:59.642Z
Reserved: 2024-10-10T19:15:13.257Z
Link: CVE-2025-20350
Updated: 2025-10-15T17:42:56.366Z
Status : Analyzed
Published: 2025-10-15T17:15:48.880
Modified: 2025-12-04T21:29:46.177
Link: CVE-2025-20350
No data.