CNNVD-202509-256 Information

CNNVD ID

CNNVD-202509-256

CVE-2025-20336

  • CNNVD Published: 2025-09-03

Description (Chinese)

Cisco IP Phone等都是美国思科(Cisco)公司的产品。Cisco IP Phone是一个硬件设备。Cisco Video Phone是一款 IP 电话。Cisco Desk Phone是一款桌面电话。 Cisco多款产品存在信息泄露漏洞,该漏洞源于敏感信息暴露,可能导致信息泄露。以下产品受到影响:Cisco Desk Phone 9800 Series、Cisco IP Phone 7800、8800 Series和Cisco Video Phone 8875。

Description (English)

Cisco IP Phone and others are all Cisco products. Cisco IP Phone is a hardware device. Cisco Video Phone is an IP phone. Cisco Desk Phone is a desktop phone. There is an information leakage loophole in various Cisco products, which originates from sensitive information exposure and may lead to disclosure. The following products were affected: Cisco Desk Phone 9800 Series, Cisco IP Phone 7800, 8800 Series and Cisco Vidio Phone 8875.

Hazard Level

High

Vulnerability Type

信息泄露

Affected Vendor

Citadel

Published

2025-09-03

Last Modified

2026-02-24

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df https://vigilance.fr/vulnerability/Cisco-IP-Phone-7800-8800-read-write-access-via-SIP-Software-48127

Patch

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df

Share on: