CVE-2025-30184CWE-288

CyberData 011209 SIP Emergency Intercom Authentication Bypass Using an Alternate Path or Channel

Critical · published June 9, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

🚨 An unauthenticated user can access the Web Interface of CyberData's 011209 Intercom through an alternative route. This is a serious risk that warrants immediate attention! 🔥 Think of it like a hotel room with a secret entrance that no one knows about. If a stranger finds it, they can waltz right in without needing a keycard—potentially causing chaos! In this scenario, an attacker could gain full access to the system without any authentication. This means they could manipulate settings, listen in on communications, or even disable vital functions, leading to a security nightmare for businesses relying on this intercom system.

Put simply

Think of it like a hotel room with a secret entrance that no one knows about. If a stranger finds it, they can waltz right in without needing a keycard—potentially causing chaos! The vulnerability stems from an alternate access path in the Web Interface that doesn't require authentication, allowing unauthorized parties to interact with the device as if they were legitimate users.

What to do

In this scenario, an attacker could gain full access to the system without any authentication. This means they could manipulate settings, listen in on communications, or even disable vital functions, leading to a security nightmare for businesses relying on this intercom system. To secure your CyberData 011209 Intercom, immediately apply the latest firmware update available from the vendor. Additionally, review your network security settings to ensure proper firewall rules and isolation of these devices from the public internet. You've got this! By taking these steps, you can safeguard your system and help keep the digital landscape secure! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00520 · 43.3th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-06-09T22:05Z
EPSS history
Timeline
  • 09 JUN 22:05Z
    CyberData 011209 SIP Emergency Intercom Authentication Bypass Using an Alternate Path or Channel
    cvelistv5