Skip to content
OpenAdvisories
Critical ICSA-25-155-01 5 CVEs

CyberData 011209 SIP Emergency Intercom

Published Jun 5, 2025 · Updated Jun 5, 2025

Vendor: CyberData Product: 011209 SIP Emergency Intercom

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial-of-service condition, or achieve code execution.

Vulnerabilities 5

  • Critical 9.8
    CVE-2025-30184

    CyberData 011209 SIP Emergency Intercom Authentication Bypass Using an Alternate Path or Channel

    CyberData 011209 Intercom could allow an unauthenticated user access to the Web Interface through an alternate path.

    CyberData 011209 SIP Emergency Intercom
  • Critical 9.8
    CVE-2025-30515

    CyberData 011209 SIP Emergency Intercom Path Traversal

    CyberData 011209 Intercom could allow an authenticated attacker to upload arbitrary files to multiple locations within the system.

    CyberData 011209 SIP Emergency Intercom
  • High 7.5
    CVE-2025-26468

    CyberData 011209 SIP Emergency Intercom Missing Authentication for Critical Function

    CyberData  011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption.

    CyberData 011209 SIP Emergency Intercom
  • High 7.5
    CVE-2025-30183

    CyberData 011209 SIP Emergency Intercom Insufficiently Protected Credentials

    CyberData 011209 Intercom does not properly store or protect web server admin credentials.

    CyberData 011209 SIP Emergency Intercom
  • Medium 5.3
    CVE-2025-30507

    CyberData 011209 SIP Emergency Intercom SQL Injection

    CyberData 011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injections.

    CyberData 011209 SIP Emergency Intercom

Revision history

  1. #1

    Initial Publication

References