[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6bhS6Wvcm6I47FE6eeYNo_jIfNt192cdVRYwvKDux-k":3,"g5a-risk:CVE-2025-20165":107},{"success":4,"data":5,"meta":104},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":56,"weaknesses":57,"weaknessesCount":41,"isActivelyExploited":66,"cisaInfo":26,"otxData":26,"relatedBlogPosts":67,"seoMetadata":68,"configurations":93,"relatedVendorCves":102,"notableEvents":103},"CVE-2025-20165","What is CVE-2025-20165?","A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper memory handling for certain SIP requests. An attacker could exploit this vulnerability by sending a high number of SIP requests to an affected system. A successful exploit could allow the attacker to exhaust the memory that was allocated to the Cisco BroadWorks Network Servers that handle SIP traffic. If no memory is available, the Network Servers can no longer process incoming requests, resulting in a DoS condition that requires manual intervention to recover.","A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP re...","2025-01-22T17:15:13.01","2026-06-17T08:40:50.073",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"psirt@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[],[],[],0.00854,[32,32,32,32,32,32,32],"High",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"cisco","broadworks_network_server","*","cpe:2.3:a:cisco:broadworks_network_server:*:*:*:*:release_independent:*:*:*",1,[43,48,53],{"url":44,"source":45,"tags":46},"https:\u002F\u002Fblog.clamav.net\u002F2025\u002F01\u002Fclamav-142-and-108-security-patch.html","Clamav",[47],"Not Applicable",{"url":49,"source":50,"tags":51},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-bw-sip-dos-mSySbrmt","Cisco",[52],"Vendor Advisory",{"url":54,"source":50,"tags":55},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-clamav-ole2-H549rphA",[47],3,[58],{"id":59,"name":60,"description":61,"extendedDescription":62,"status":63,"abstraction":64,"structure":65},"CWE-789","Memory Allocation with Excessive Size Value","The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.","","Draft","Variant","Simple",false,[],{"title":69,"metaDescription":70,"keywords":71,"canonicalUrl":72,"structuredData":73},"What is CVE-2025-20165? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-20165, a high severity cyber security vulnerability from 2025. A vulnerability in the SIP processing subsystem of Cisco Br...","CVE-2025-20165, CVE-2025-20165 vulnerability, CVE-2025-20165 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, cisco security, broadworks_network_server vulnerability","\u002Fwhat-is\u002Fcve-2025-20165",{"@context":74,"@type":75,"headline":69,"description":70,"datePublished":10,"dateModified":11,"author":76,"publisher":80,"about":84,"mainEntityOfPage":88,"articleSection":91,"keywords":92},"https:\u002F\u002Fschema.org","TechArticle",{"@type":77,"name":78,"url":79},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":77,"name":78,"url":79,"logo":81},{"@type":82,"url":83},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":85,"name":6,"description":86,"additionalType":87},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":89,"@id":90},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-20165","Cybersecurity","CVE-2025-20165, CVE-2025-20165 vulnerability, CVE-2025-20165 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[94],{"Operator":26,"Negate":26,"Nodes":95},[96],{"Operator":97,"Negate":66,"CPEMatch":98},"OR",[99],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":100,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":101,"VersionEndIncluding":26},"43D91BFD-CBD1-4CBE-8D91-AB46C759461C","2024.11",[],[],{"lastModified":11,"cacheTime":105,"version":106},1794634276504,"2.0",{"score":108,"band":109,"action":110,"scoredAt":111},47,"Medium","Plan remediation","2026-11-13T07:07:31.671092+00:00"]