CVE-2025-30515

The vulnerability is classified as CWE-35 (Path Traversal: '.../.../') and involves insufficient path validation during file upload operations. An authenticated attacker can specify a target path containing directory traversal sequences, which allows saving arbitrary files outside the intended target directory. As a result, it is possible to place malicious files in multiple locations on the device's file system.

An attacker can overwrite critical system files or place malicious code anywhere in the device's file system, which may lead to permanent takeover of the intercom, disruption of its operation, or use it as an entry point to the network.

Apply patches available from the manufacturer according to the references. It is recommended to restrict access to the device management interface to trusted IP addresses only and use strong authentication. Detailed information is available in the CISA advisory: https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01

CyberData 011209 SIP Emergency Intercom and related firmware — specific versions indicated in the manufacturer's references (CISA ICS-CERT advisory ICSA-25-155-01)