CVE-2025-30515 CyberData CVE debrief

Who should care

Industrial control system operators, physical security teams, telecom/VoIP administrators, facilities teams, and vulnerability management teams responsible for CyberData 011209 SIP Emergency Intercom deployments.

Technical summary

The supplied advisory material indicates an authenticated arbitrary file upload weakness affecting CyberData 011209 SIP Emergency Intercom versions <22.0.1. The CVSS 3.1 vector provided is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating remote network attackability with high confidentiality, integrity, and availability impact in the advisory context. The source corpus identifies the vendor remediation as upgrading to v22.0.1.

Defensive priority

Critical. Patch as soon as practical, especially if the device is reachable from broader network segments or supports operational workflows that cannot tolerate compromise or tampering.

Recommended defensive actions

• Upgrade CyberData 011209 SIP Emergency Intercom to v22.0.1 as recommended by the vendor.
• Inventory all deployed 011209 devices and confirm which ones are running versions earlier than 22.0.1.
• Restrict network exposure to the intercom device to only necessary management and operational paths.
• Apply ICS segmentation and defense-in-depth controls consistent with CISA recommended practices.
• Review system logs and file integrity for unexpected uploads or changes on affected devices.
• Validate backups and recovery procedures for the device configuration and any dependent operational settings.

Evidence notes

All substantive claims are taken from the supplied CISA CSAF advisory data for ICSA-25-155-01 / CVE-2025-30515 and its referenced official links. The source corpus states that CyberData 011209 SIP Emergency Intercom versions <22.0.1 are affected, that the issue can allow an authenticated attacker to upload arbitrary files to multiple locations, and that CyberData recommends updating to v22.0.1. The supplied CVSS data is 9.8 CRITICAL with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Official resources