CVE-2025-20158: Infoleak
A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials with SSH access on the affected device. SSH access is disabled by default. This vulnerability is due to insufficient validation of user-supplied input by the debug shell of an affected device. An attacker could exploit this vulnerability by sending a crafted SSH client command to the CLI. A successful exploit could allow the attacker to access sensitive information on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20158?
CVE-2025-20158 is rated as a high severity vulnerability due to its potential for unauthorized access to sensitive information.
How do I fix CVE-2025-20158?
To mitigate CVE-2025-20158, ensure that SSH access is restricted and only granted to trusted users with a need for administrative credentials.
Who is affected by CVE-2025-20158?
CVE-2025-20158 affects users of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series devices.
What type of attack is associated with CVE-2025-20158?
CVE-2025-20158 could be exploited by an authenticated local attacker who has administrative SSH access to the device.
What information can be accessed through CVE-2025-20158?
An attacker exploiting CVE-2025-20158 could access sensitive information stored on the affected Cisco devices.