CVE-2025-20351: desk phone 9871 firmware from 3.0\(1\) (inclusive), through 3.2\(1\) (inclusive); +17 more affected products

Affected technology

desk phone 9871 firmware · from 3.0\(1\) (inclusive), through 3.2\(1\) (inclusive)
cisco

desk phone 9841 firmware · from 3.0\(1\) (inclusive), through 3.2\(1\) (inclusive)
cisco

desk phone 9851 firmware · from 3.0\(1\) (inclusive), through 3.2\(1\) (inclusive)
cisco

desk phone 9861 firmware · from 3.0\(1\) (inclusive), through 3.2\(1\) (inclusive)
cisco

ip phone 8865 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 8865 firmware · 14.3(1)
cisco

ip phone 8865 firmware · 14.3(1) · update sr1
cisco

ip phone 7811 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 7811 firmware · 14.3(1)
cisco

ip phone 7811 firmware · 14.3(1) · update sr1
cisco

ip phone 7821 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 7821 firmware · 14.3(1)
cisco

ip phone 7821 firmware · 14.3(1) · update sr1
cisco

ip phone 7841 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 7841 firmware · 14.3(1)
cisco

ip phone 7841 firmware · 14.3(1) · update sr1
cisco

ip phone 7861 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 7861 firmware · 14.3(1)
cisco

ip phone 7861 firmware · 14.3(1) · update sr1
cisco

ip phone 8811 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 8811 firmware · 14.3(1)
cisco

ip phone 8811 firmware · 14.3(1) · update sr1
cisco

ip phone 8832 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 8832 firmware · 14.3(1)
cisco

ip phone 8832 firmware · 14.3(1) · update sr1
cisco

ip phone 8841 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 8841 firmware · 14.3(1)
cisco

ip phone 8841 firmware · 14.3(1) · update sr1
cisco

ip phone 8845 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 8845 firmware · 14.3(1)
cisco

ip phone 8845 firmware · 14.3(1) · update sr1
cisco

ip phone 8851 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 8851 firmware · 14.3(1)
cisco

ip phone 8851 firmware · 14.3(1) · update sr1
cisco

ip phone 8861 firmware · before 14.3\(1\) (exclusive)
cisco

ip phone 8861 firmware · 14.3(1)
cisco

ip phone 8861 firmware · 14.3(1) · update sr1
cisco

ip phone 8821 firmware · before 11.0\(1\) (exclusive)
cisco

ip phone 8821 firmware · 11.0(0.7) · update mpp
cisco

ip phone 8821 firmware · 11.0(1)
cisco

ip phone 8821 firmware · 11.0(2)
cisco

ip phone 8821 firmware · 11.0(2) · update sr1
cisco

ip phone 8821 firmware · 11.0(2) · update sr2
cisco

ip phone 8821 firmware · 11.0(3)
cisco

ip phone 8821 firmware · 11.0(3) · update sr1
cisco

ip phone 8821 firmware · 11.0(3) · update sr2
cisco

ip phone 8821 firmware · 11.0(3) · update sr3
cisco

ip phone 8821 firmware · 11.0(3) · update sr4
cisco

ip phone 8821 firmware · 11.0(3) · update sr5
cisco

ip phone 8821 firmware · 11.0(3) · update sr6
cisco

ip phone 8821 firmware · 11.0(4)
cisco

ip phone 8821 firmware · 11.0(4) · update sr1
cisco

ip phone 8821 firmware · 11.0(4) · update sr2
cisco

ip phone 8821 firmware · 11.0(4) · update sr3
cisco

ip phone 8821 firmware · 11.0(5)
cisco

ip phone 8821 firmware · 11.0(5) · update sr1
cisco

ip phone 8821 firmware · 11.0(5) · update sr2
cisco

ip phone 8821 firmware · 11.0(5) · update sr3
cisco

ip phone 8821 firmware · 11.0(6)
cisco

ip phone 8821 firmware · 11.0(6) · update sr1
cisco

ip phone 8821 firmware · 11.0(6) · update sr2
cisco

ip phone 8821 firmware · 11.0(6) · update sr4
cisco

ip phone 8821 firmware · 11.0(6) · update sr5
cisco

ip phone 8821 firmware · 11.0(6) · update sr6
cisco

video phone 8875 firmware · before 2.3\(1\) (exclusive)
cisco

video phone 8875 firmware · from 3.0\(1\) (inclusive), through 3.2\(1\) (inclusive)
cisco

video phone 8875 firmware · 2.3(1)
cisco

video phone 8875 firmware · 2.3(1) · update sr1
cisco

Cisco Session Initiation Protocol (SIP) Software · 12.1(1)SR1, 11.5(1), 10.3(2), 10.2(2), 10.3(1), 10.3(1)SR4, 11.0(1), 10.4(1)SR2 3rd Party, 11.7(1), 12.1(1), 11.0(0.7) MPP, 9.3(4) 3rd Party, 12.5(1)SR2, 10.2(1)SR1, 9.3(4)SR3 3rd Party, 10.2(1), 12.5(1), 10.3(1)SR2, 11-0-1MSR1-1, 10.4(1) 3rd Party, 12.5(1)SR1, 11.5(1)SR1, 10.1(1)SR2, 12.0(1)SR2, 12.6(1), 10.3(1.11) 3rd Party, 12.0(1), 12.0(1)SR1, 9.3(3), 12.5(1)SR3, 10.3(1)SR4b, 9.3(4)SR1 3rd Party, 10.3(1)SR5, 10.1(1.9), 10.3(1.9) 3rd Party, 9.3(4)SR2 3rd Party, 10.3(1)SR1, 10.3(1)SR3, 10.1(1)SR1, 12.0(1)SR3, 12.6(1)SR1, 12.7(1), 10.3(1)SR6, 12.8(1), 12.7(1)SR1, 11.0(2)SR1, 11.0(4), 11.0(2), 11.0(4)SR3, 11.0(5), 11.0(3)SR2, 11.0(3)SR4, 11.0(3)SR3, 11.0(2)SR2, 11.0(4)SR1, 11.0(5)SR3, 11.0(3), 11.0(5)SR2, 11.0(3)SR6, 11.0(5)SR1, 11.0(4)SR2, 11.0(3)SR1, 11.0(3)SR5, 11.0(6), 12.8(1)SR1, 12.8(1)SR2, 14.0(1), 14.0(1)SR1, 11.0(6)SR1, 10.3(1)SR7, 14.0(1)SR2, 14.1(1), 14.0(1)SR3, 11.0(6)SR2, 14.1(1)SR1, 14.1(1)SR2, 11.0(6)SR4, 14.2(1), 14.2(1)SR1, 11.0(6)SR5, 14.1(1)SR3, 14.2(1)SR2, 3.1(1), 3.0(1), 2.3(1), 2.3(1)SR1, 2.2(1), 2.1(1), 2.0(1), 14.2(1)SR3, 3.1(1)SR1, 14.3(1), 3.2(1), 14.3(1)SR1, 14.2(1)SR4, 11.0(6)SR6, 14.3(1)SR2, 14.3(1)SR3
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

An unauthenticated, remote attacker could conduct XSS attacks against a user of the web UI. Vendor/CNA’s CVSS 3.1 assessment (base score 6.1/10) rates confidentiality and integrity impact as low; availability impact as none.