Cisco Desk Phone 9861 Firmware vulnerabilities
6 CVEs affecting Cisco Desk Phone 9861 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20351, published 2025-10-15.
More from Cisco.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2025-20350, published 2025-10-15. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote…
- CVE-2024-20445, published 2024-11-06. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive…
- CVE-2025-20336, published 2025-09-03. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access…
- CVE-2025-20335, published 2025-09-03. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to write…
- CVE-2025-20351, published 2025-10-15. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote…
- CVE-2025-20158, published 2025-02-19. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series could allow an authenticated, local attacker to access sensitive information on an affected device. To…