What’s Vulnerable › Vulnerabilities

CVE-2025-20165: Cisco BroadWorks SIP Denial of Service Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-22 · updated 2026-06-17
• Weakness: CWE-789

Description

A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (DoS) condition. This vulnerability is due to improper memory handling for certain SIP requests. An attacker could exploit this vulnerability by sending a high number of SIP requests to an affected system. A successful exploit could allow the attacker to exhaust the memory that was allocated to the Cisco BroadWorks Network Servers that handle SIP traffic. If no memory is available, the Network Servers can no longer process incoming requests, resulting in a DoS condition that requires manual intervention to recover.

Affected products

• Cisco Broadworks Network Server: before 2024.11 — fixed in 2024.11

How to fix

Upgrade to a fixed version: Cisco Broadworks Network Server 2024.11. Check the vendor advisory for mitigations.

References

• https://blog.clamav.net/2025/01/clamav-142-and-108-security-patch.html
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-sip-dos-mSySbrmt
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-ole2-H549rphA

Get alerted when CVE-2025-20165 or the next vulnerability affects your stack