VYPR

Desk Phone 9851 Firmware

by Cisco Systems, Inc.

CVEs (6)

  • CVE-2025-20350HigOct 15, 2025
    risk 0.49cvss 7.5epss 0.00

    A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due…

  • CVE-2025-20351MedOct 15, 2025
    risk 0.40cvss 6.1epss 0.00

    A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. This vulnerability…

  • CVE-2025-20336MedSep 3, 2025
    risk 0.34cvss 5.3epss 0.00

    A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability exists…

  • CVE-2025-20335MedSep 3, 2025
    risk 0.34cvss 5.3epss 0.00

    A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to a lack of…

  • CVE-2024-20445MedNov 6, 2024
    risk 0.34cvss 5.3epss 0.00

    A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to improper storage…

  • CVE-2025-20158MedFeb 19, 2025
    risk 0.29cvss 4.4epss 0.00

    A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative…