CNNVD-202510-2105 Information

CNNVD ID

CNNVD-202510-2105

CVE-2025-20350

  • CNNVD Published: 2025-10-15

Description (Chinese)

Cisco SIP Software是美国思科(Cisco)公司的一个SIP协议软件系统。 Cisco SIP Software存在安全漏洞,该漏洞源于处理HTTP数据包时存在缓冲区溢出,可能导致拒绝服务攻击。

Description (English)

Cisco SIP Software is a SIP protocol software system of Cisco. Cisco SIP Software has a security loophole, which stems from the presence of a buffer zone when HTTP data packages are processed and may lead to a denial of service attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

思科

Published

2025-10-15

Last Modified

2026-02-24

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-FPyjLV7A https://access.redhat.com/security/cve/cve-2025-20350 https://vigilance.fr/vulnerability/Cisco-IP-Phone-two-vulnerabilities-via-SIP-48507

Patch

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-FPyjLV7A

Share on: