High severity · published Jan 22, 2025
CVE-2025-20165
Cisco BroadWorks SIP Denial of Service Vulnerability
7.5
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (DoS) condition.
This vulnerability is due to improper memory handling for certain SIP requests. An attacker could exploit this vulnerability by sending a high number of SIP requests to an affected system. A successful exploit could allow the attacker to exhaust the memory that was allocated to the Cisco BroadWorks Network Servers that handle SIP traffic. If no memory is available, the Network Servers can no longer process incoming requests, resulting in a DoS condition that requires manual intervention to recover.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Cisco BroadWorks · Cisco
22.0; 23.0; RI.2021.02; 23.0 ap380391; 23.0 ap380396; RI.2021.08; +34 more · source: vendor
BN
Broadworks Network Server · Cisco
before 2024.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-20165
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-20165
Not Applicable
https://blog.clamav.net/2025/01/clamav-142-and-108-security-patch.html
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-sip-dos-mSySbrmt
Not Applicable
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-ole2-H549rphA
More from Cisco BroadWorks
8.8
CVE-2022-20958
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request…
8.6
CVE-2023-20125
Cisco BroadWorks Network Server TCP Denial of Service Vulnerability
7.5
CVE-2026-20320
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an…
6.5
CVE-2026-76438
Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
6.5
CVE-2022-20951
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to perform a server-side request…