Vulnerability-Lookup

FKIE_CVE-2025-20336

Vulnerability from fkie_nvd - Published: 2025-09-03 18:15 - Updated: 2026-01-05 14:49

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability exists because the product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. An attacker could exploit this vulnerability by sending a crafted packet to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information from the device. Note: To exploit this vulnerability, Web Access must be enabled on the phone. Web Access is disabled by default.

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df	Vendor Advisory

Impacted products

Vendor	Product	Version
cisco	desk_phone_9841_firmware	*
cisco	desk_phone_9841	-
cisco	desk_phone_9851_firmware	*
cisco	desk_phone_9851	-
cisco	desk_phone_9861_firmware	*
cisco	desk_phone_9861	-
cisco	desk_phone_9871_firmware	*
cisco	desk_phone_9871	-
cisco	ip_phone_8841_firmware	*
cisco	ip_phone_8841_firmware	14.3\(1\)
cisco	ip_phone_8841_firmware	14.3\(1\)
cisco	ip_phone_8841	-
cisco	ip_phone_7811_firmware	*
cisco	ip_phone_7811_firmware	14.3\(1\)
cisco	ip_phone_7811_firmware	14.3\(1\)
cisco	ip_phone_7811	-
cisco	ip_phone_7821_firmware	*
cisco	ip_phone_7821_firmware	14.3\(1\)
cisco	ip_phone_7821_firmware	14.3\(1\)
cisco	ip_phone_7821	-
cisco	ip_phone_7841_firmware	*
cisco	ip_phone_7841_firmware	14.3\(1\)
cisco	ip_phone_7841_firmware	14.3\(1\)
cisco	ip_phone_7841	-
cisco	ip_phone_7861_firmware	*
cisco	ip_phone_7861_firmware	14.3\(1\)
cisco	ip_phone_7861_firmware	14.3\(1\)
cisco	ip_phone_7861	-
cisco	ip_phone_8811_firmware	*
cisco	ip_phone_8811_firmware	14.3\(1\)
cisco	ip_phone_8811_firmware	14.3\(1\)
cisco	ip_phone_8811	-
cisco	ip_phone_8845_firmware	*
cisco	ip_phone_8845_firmware	14.3\(1\)
cisco	ip_phone_8845_firmware	14.3\(1\)
cisco	ip_phone_8845	-
cisco	ip_phone_8851_firmware	*
cisco	ip_phone_8851_firmware	14.3\(1\)
cisco	ip_phone_8851_firmware	14.3\(1\)
cisco	ip_phone_8851	-
cisco	ip_phone_8851nr_firmware	*
cisco	ip_phone_8851nr_firmware	14.3\(1\)
cisco	ip_phone_8851nr_firmware	14.3\(1\)
cisco	ip_phone_8851nr	-
cisco	ip_phone_8861_firmware	*
cisco	ip_phone_8861_firmware	14.3\(1\)
cisco	ip_phone_8861_firmware	14.3\(1\)
cisco	ip_phone_8861	-
cisco	ip_phone_8865_firmware	*
cisco	ip_phone_8865_firmware	14.3\(1\)
cisco	ip_phone_8865_firmware	14.3\(1\)
cisco	ip_phone_8865	-
cisco	video_phone_8875_firmware	*
cisco	video_phone_8875_firmware	*
cisco	video_phone_8875_firmware	2.3\(1\)
cisco	video_phone_8875_firmware	2.3\(1\)
cisco	video_phone_8875	-
cisco	ip_phone_8821_firmware	*
cisco	ip_phone_8821_firmware	11.0\(6\)
cisco	ip_phone_8821_firmware	11.0\(6\)
cisco	ip_phone_8821_firmware	11.0\(6\)
cisco	ip_phone_8821_firmware	11.0\(6\)
cisco	ip_phone_8821_firmware	11.0\(6\)
cisco	ip_phone_8821_firmware	11.0\(6\)
cisco	ip_phone_8821	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:desk_phone_9841_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF49016B-CAE6-4DE4-8449-04869029360B",
              "versionEndExcluding": "3.3\\(1\\)",
              "versionStartIncluding": "3.0\\(1\\)",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:desk_phone_9841:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8176E19D-B625-4891-9018-F42228F1266B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:desk_phone_9851_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "643F71B7-91EF-433B-A4EE-DC0A4D7ABF03",
              "versionEndExcluding": "3.3\\(1\\)",
              "versionStartIncluding": "3.0\\(1\\)",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:desk_phone_9851:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "713F43A6-745A-4DAB-AD2D-3139E9E5C1A0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:desk_phone_9861_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B218261-3865-4179-A775-2DCF37C713C8",
              "versionEndExcluding": "3.3\\(1\\)",
              "versionStartIncluding": "3.0\\(1\\)",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:desk_phone_9861:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8D01D5F-4EAE-4547-AB41-44F7885491C0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:desk_phone_9871_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "45174807-089C-4E3C-9C02-1D6D8708BC49",
              "versionEndExcluding": "3.3\\(1\\)",
              "versionStartIncluding": "3.0\\(1\\)",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:desk_phone_9871:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D14CF47-7581-40E5-91A1-AC6BB5137358",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0C291D5-EEF2-4CEF-9C2D-E4F067AEE5A5",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8841_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "B27034E5-2F4B-4210-8A80-6A6362F8C980",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8841_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "965852CD-DBCC-4AAE-AD00-C29B0933005D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7944CC9C-AE08-4F30-AF65-134DADBD0FA1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C71D54E-2D4A-4AA7-8E93-33214794B0B2",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7811_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "AC626E90-9019-4180-BE62-047B9864C34E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7811_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "5B747AA4-D45A-4A8E-BEB1-533CF085D1F8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7260C17-7067-47AD-995F-366A5E8B10E7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D27D332-69A3-4CFF-AE61-AAA6B31FAFC1",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7821_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "C3E84980-7697-4479-A2E9-18E4BF3B991E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7821_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "88926FA9-41A2-4ECE-992F-B4200694BC7D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2072265-6A36-4DB7-8722-C288AFA695FB",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7841_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "80A9D20F-985B-4500-94A8-05DECE565C20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7841_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "11F0AAF5-913C-4FC2-9345-21F713985F24",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8D70C616-D775-41EB-BC7D-113F817B22EA",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7861_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "967D674B-9925-4AE7-AED6-751046960403",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_7861_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "C379DA9E-FEEE-468E-BBE2-7EF498010B30",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E52C420C-FD54-4BE4-8720-E05307D53520",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "371ABCD4-DF50-4815-B02C-38D0505874FD",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8811_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "8CEBC653-2CED-4B2D-9890-B789F33DFE8B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8811_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "62BAFED6-BDE9-47FA-A632-7920A4AD32B3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0CC3127-3152-4906-9FE0-BC6F21DCADAA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "50A18EDF-71F8-4B26-B5E7-1742831695E4",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8845_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "C1B44331-2BA1-402E-9317-8A3C97B646C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8845_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "F716386E-44D5-462C-8FB5-FEF754256BC9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A313E64A-F43C-4FBA-A389-6171CBD709C0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C56F335-2124-4806-8F30-9C67367BB44D",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8851_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "3CE7C15E-BD09-40C4-8187-7E523BFC0899",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8851_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "24DD015B-C863-4F9C-8B97-729272586D87",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AF6DC5E-F582-445E-BF05-2D55A0954663",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8851nr_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D47B048-D47B-45E1-BD25-C19A6B7CC55A",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8851nr_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "247B120C-20A0-4F0D-B9E6-C252ECF6194C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8851nr_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "1FD5202B-453C-49E1-A6CD-810C033380BA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_8851nr:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23BB2274-7668-4B80-9FF2-EC724C44685B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "196320B1-DC92-4D24-A34F-C1287B8382BE",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8861_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "6AD2886B-D249-4B2C-933F-1E81889FB9F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8861_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "63457A22-1F0D-4E01-8D6D-EDAD920E8BE5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "090EE553-01D5-45F0-87A4-E1167F46EB77",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A5C0983-4639-48E7-BE52-E69629EB802B",
              "versionEndExcluding": "14.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8865_firmware:14.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "8B1CAB0B-ACB7-4AE1-B21C-FEC8D57F490E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8865_firmware:14.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "C207966D-C755-455F-B266-02FAD5CD3412",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C76337A0-E138-4227-A0F1-9CF635EECC14",
              "versionEndExcluding": "2.3\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E930C776-5D3B-4F40-9F38-A8135AA6D9CB",
              "versionEndExcluding": "3.3\\(1\\)",
              "versionStartIncluding": "3.0\\(1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\\(1\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "41019D10-27B9-4DA6-9DF3-780D0A7EE75C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\\(1\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "690E8866-FF2F-4C72-8510-1E587B535A42",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC9019DD-6941-42F3-8B66-1F3CDDDA86E7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8821_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "54AA3288-EAFA-41FB-9532-9BA69C03F130",
              "versionEndExcluding": "11.0\\(6\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\\(6\\):-:*:*:*:*:*:*",
              "matchCriteriaId": "FBB24293-E296-4ABC-A887-09B741702F09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\\(6\\):sr1:*:*:*:*:*:*",
              "matchCriteriaId": "0A82BD02-5781-489F-8112-DA59E998F36A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\\(6\\):sr2:*:*:*:*:*:*",
              "matchCriteriaId": "3DED54C3-AB49-4030-98C3-4D4BD3D220D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\\(6\\):sr4:*:*:*:*:*:*",
              "matchCriteriaId": "B9C7E266-6BA9-47EB-AF37-0A948C780D5D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\\(6\\):sr5:*:*:*:*:*:*",
              "matchCriteriaId": "6FC9887F-0F65-4FA5-95A4-95BAB70C03FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\\(6\\):sr6:*:*:*:*:*:*",
              "matchCriteriaId": "097229AD-1840-4AB3-8120-0261DCA50986",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_8821:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "36C99E0B-0383-4CB3-B325-EC0F3D57D39D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device.\r\n\r\nThis vulnerability exists because the product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. An attacker could exploit this vulnerability by sending a crafted packet to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information from the device.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone. Web Access is disabled by default."
    }
  ],
  "id": "CVE-2025-20336",
  "lastModified": "2026-01-05T14:49:30.253",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2025-09-03T18:15:34.637",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    }
  ]
}

CVE-2025-20336 (GCVE-0-2025-20336)

Vulnerability from cvelistv5 – Published: 2025-09-03 17:41 – Updated: 2025-09-03 17:57

Title

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability

Summary

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

cisco

References

URL

Tags

https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Session Initiation Protocol (SIP) Software	Affected: 12.1(1)SR1 Affected: 11.5(1) Affected: 10.3(2) Affected: 10.2(2) Affected: 10.3(1) Affected: 10.3(1)SR4 Affected: 11.0(1) Affected: 10.4(1)SR2 3rd Party Affected: 11.7(1) Affected: 12.1(1) Affected: 11.0(0.7) MPP Affected: 9.3(4) 3rd Party Affected: 12.5(1)SR2 Affected: 10.2(1)SR1 Affected: 9.3(4)SR3 3rd Party Affected: 10.2(1) Affected: 12.5(1) Affected: 10.3(1)SR2 Affected: 11-0-1MSR1-1 Affected: 10.4(1) 3rd Party Affected: 12.5(1)SR1 Affected: 11.5(1)SR1 Affected: 10.1(1)SR2 Affected: 12.0(1)SR2 Affected: 12.6(1) Affected: 10.3(1.11) 3rd Party Affected: 12.0(1) Affected: 12.0(1)SR1 Affected: 9.3(3) Affected: 12.5(1)SR3 Affected: 10.3(1)SR4b Affected: 9.3(4)SR1 3rd Party Affected: 10.3(1)SR5 Affected: 10.1(1.9) Affected: 10.3(1.9) 3rd Party Affected: 9.3(4)SR2 3rd Party Affected: 10.3(1)SR1 Affected: 10.3(1)SR3 Affected: 10.1(1)SR1 Affected: 12.0(1)SR3 Affected: 12.6(1)SR1 Affected: 12.7(1) Affected: 10.3(1)SR6 Affected: 12.8(1) Affected: 12.7(1)SR1 Affected: 12.8(1)SR1 Affected: 12.8(1)SR2 Affected: 14.0(1) Affected: 14.0(1)SR1 Affected: 10.3(1)SR7 Affected: 14.0(1)SR2 Affected: 14.1(1) Affected: 14.0(1)SR3 Affected: 14.1(1)SR1 Affected: 14.1(1)SR2 Affected: 14.2(1) Affected: 14.2(1)SR1 Affected: 14.1(1)SR3 Affected: 14.2(1)SR2 Affected: 3.1(1) Affected: 3.0(1) Affected: 2.3(1) Affected: 2.3(1)SR1 Affected: 2.2(1) Affected: 2.1(1) Affected: 2.0(1) Affected: 14.2(1)SR3 Affected: 3.1(1)SR1 Affected: 14.3(1) Affected: 3.2(1) Affected: 14.3(1)SR1 Affected: 14.2(1)SR4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-20336",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-03T17:57:26.410747Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-03T17:57:31.207Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Session Initiation Protocol (SIP) Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "12.1(1)SR1"
            },
            {
              "status": "affected",
              "version": "11.5(1)"
            },
            {
              "status": "affected",
              "version": "10.3(2)"
            },
            {
              "status": "affected",
              "version": "10.2(2)"
            },
            {
              "status": "affected",
              "version": "10.3(1)"
            },
            {
              "status": "affected",
              "version": "10.3(1)SR4"
            },
            {
              "status": "affected",
              "version": "11.0(1)"
            },
            {
              "status": "affected",
              "version": "10.4(1)SR2 3rd Party"
            },
            {
              "status": "affected",
              "version": "11.7(1)"
            },
            {
              "status": "affected",
              "version": "12.1(1)"
            },
            {
              "status": "affected",
              "version": "11.0(0.7) MPP"
            },
            {
              "status": "affected",
              "version": "9.3(4) 3rd Party"
            },
            {
              "status": "affected",
              "version": "12.5(1)SR2"
            },
            {
              "status": "affected",
              "version": "10.2(1)SR1"
            },
            {
              "status": "affected",
              "version": "9.3(4)SR3 3rd Party"
            },
            {
              "status": "affected",
              "version": "10.2(1)"
            },
            {
              "status": "affected",
              "version": "12.5(1)"
            },
            {
              "status": "affected",
              "version": "10.3(1)SR2"
            },
            {
              "status": "affected",
              "version": "11-0-1MSR1-1"
            },
            {
              "status": "affected",
              "version": "10.4(1) 3rd Party"
            },
            {
              "status": "affected",
              "version": "12.5(1)SR1"
            },
            {
              "status": "affected",
              "version": "11.5(1)SR1"
            },
            {
              "status": "affected",
              "version": "10.1(1)SR2"
            },
            {
              "status": "affected",
              "version": "12.0(1)SR2"
            },
            {
              "status": "affected",
              "version": "12.6(1)"
            },
            {
              "status": "affected",
              "version": "10.3(1.11) 3rd Party"
            },
            {
              "status": "affected",
              "version": "12.0(1)"
            },
            {
              "status": "affected",
              "version": "12.0(1)SR1"
            },
            {
              "status": "affected",
              "version": "9.3(3)"
            },
            {
              "status": "affected",
              "version": "12.5(1)SR3"
            },
            {
              "status": "affected",
              "version": "10.3(1)SR4b"
            },
            {
              "status": "affected",
              "version": "9.3(4)SR1 3rd Party"
            },
            {
              "status": "affected",
              "version": "10.3(1)SR5"
            },
            {
              "status": "affected",
              "version": "10.1(1.9)"
            },
            {
              "status": "affected",
              "version": "10.3(1.9) 3rd Party"
            },
            {
              "status": "affected",
              "version": "9.3(4)SR2 3rd Party"
            },
            {
              "status": "affected",
              "version": "10.3(1)SR1"
            },
            {
              "status": "affected",
              "version": "10.3(1)SR3"
            },
            {
              "status": "affected",
              "version": "10.1(1)SR1"
            },
            {
              "status": "affected",
              "version": "12.0(1)SR3"
            },
            {
              "status": "affected",
              "version": "12.6(1)SR1"
            },
            {
              "status": "affected",
              "version": "12.7(1)"
            },
            {
              "status": "affected",
              "version": "10.3(1)SR6"
            },
            {
              "status": "affected",
              "version": "12.8(1)"
            },
            {
              "status": "affected",
              "version": "12.7(1)SR1"
            },
            {
              "status": "affected",
              "version": "12.8(1)SR1"
            },
            {
              "status": "affected",
              "version": "12.8(1)SR2"
            },
            {
              "status": "affected",
              "version": "14.0(1)"
            },
            {
              "status": "affected",
              "version": "14.0(1)SR1"
            },
            {
              "status": "affected",
              "version": "10.3(1)SR7"
            },
            {
              "status": "affected",
              "version": "14.0(1)SR2"
            },
            {
              "status": "affected",
              "version": "14.1(1)"
            },
            {
              "status": "affected",
              "version": "14.0(1)SR3"
            },
            {
              "status": "affected",
              "version": "14.1(1)SR1"
            },
            {
              "status": "affected",
              "version": "14.1(1)SR2"
            },
            {
              "status": "affected",
              "version": "14.2(1)"
            },
            {
              "status": "affected",
              "version": "14.2(1)SR1"
            },
            {
              "status": "affected",
              "version": "14.1(1)SR3"
            },
            {
              "status": "affected",
              "version": "14.2(1)SR2"
            },
            {
              "status": "affected",
              "version": "3.1(1)"
            },
            {
              "status": "affected",
              "version": "3.0(1)"
            },
            {
              "status": "affected",
              "version": "2.3(1)"
            },
            {
              "status": "affected",
              "version": "2.3(1)SR1"
            },
            {
              "status": "affected",
              "version": "2.2(1)"
            },
            {
              "status": "affected",
              "version": "2.1(1)"
            },
            {
              "status": "affected",
              "version": "2.0(1)"
            },
            {
              "status": "affected",
              "version": "14.2(1)SR3"
            },
            {
              "status": "affected",
              "version": "3.1(1)SR1"
            },
            {
              "status": "affected",
              "version": "14.3(1)"
            },
            {
              "status": "affected",
              "version": "3.2(1)"
            },
            {
              "status": "affected",
              "version": "14.3(1)SR1"
            },
            {
              "status": "affected",
              "version": "14.2(1)SR4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device.\r\n\r\nThis vulnerability exists because the product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. An attacker could exploit this vulnerability by sending a crafted packet to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information from the device.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone. Web Access is disabled by default."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-03T17:41:01.463Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-phone-write-g3kcC5Df",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df"
        }
      ],
      "source": {
        "advisory": "cisco-sa-phone-write-g3kcC5Df",
        "defects": [
          "CSCwn51677"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2025-20336",
    "datePublished": "2025-09-03T17:41:01.463Z",
    "dateReserved": "2024-10-10T19:15:13.255Z",
    "dateUpdated": "2025-09-03T17:57:31.207Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2025-20336

CVE-2025-20336 (GCVE-0-2025-20336)

Tags

Sightings

Nomenclature