Product: Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, Cisco Video Phone 8875
Summary
A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this vulnerability by sending a crafted request to an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-20335 |
Exploitation
To exploit this vulnerability, an attacker must send a crafted request to an affected device with Web Access enabled. This feature is disabled by default, so the attacker must ensure it is enabled to perform arbitrary file writes to specific directories in the underlying operating system.
Affected Products
- Cisco Desk Phone 9800 Series: Affected by directory permission vulnerabilities allowing file writes.
- Cisco IP Phone 7800 Series: Vulnerable to unauthorized file writes due to lack of authentication controls.
- Cisco IP Phone 8800 Series: Similar vulnerabilities as the 7800 Series, allowing remote exploitation.
- Cisco Video Phone 8875: Can be exploited in the same manner as the other affected products.
Mitigation
To mitigate this vulnerability, ensure that Web Access is disabled on all affected devices. Regularly review and update device configurations to maintain security and prevent unauthorized access.