PT-2025-4146 · Cisco · Cisco Broadworks

Published 2025-01-22 · Updated 2025-08-06 · CVE-2025-20165

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco BroadWorks (affected versions not specified)

Description A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (DoS) condition. This vulnerability is due to improper memory handling for certain SIP requests. An attacker could exploit this vulnerability by sending a high number of SIP requests to an affected system, potentially exhausting the allocated memory and resulting in a DoS condition that requires manual intervention to recover.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. However, it is recommended to update to RI.2024.11 to prevent service interruption. As a temporary workaround, consider restricting the number of incoming SIP requests to minimize the risk of exploitation. Additionally, monitoring the system's memory allocation and taking measures to prevent memory exhaustion can help mitigate the issue.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-789

CWE-476

Related Identifiers

BDU:2025-05020

CVE-2025-20165

Affected Products

Cisco Broadworks

References · 12

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-sip-dos-mSySbrmt · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-ole2-H549rphA · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20165 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20165 · Security Note
• https://bdu.fstec.ru/vul/2025-05020 · Security Note
• https://t.me/cvedetector/16126 · Telegram Post
• https://twitter.com/SystemTek_UK/status/1882745596244582577 · Twitter Post
• https://blog.clamav.net/2025/01/clamav-142-and-108-security-patch.html · Note
• https://t.me/true_secator/6649 · Telegram Post
• https://twitter.com/CVEnew/status/1882137395132551514 · Twitter Post
• https://t.me/cveNotify/131145 · Telegram Post
• https://twitter.com/Eth1calHackrZ/status/1883428411361853555 · Twitter Post