CVE-2025-30515 — AI Deep Analysis Summary

🚨 **Essence**: CyberData 011209 Intercom allows **arbitrary file upload** by authenticated attackers. 💥 **Consequences**: Full system compromise. CVSS 9.8 (Critical).…

🛡️ **Root Cause**: **CWE-35** (Path Traversal). The device fails to properly sanitize file paths during upload, allowing attackers to write files outside the intended directory.

🏢 **Affected**: **CyberData 011209 SIP Emergency Intercom**. Specifically the emergency call device manufactured by CyberData. No specific firmware versions listed in data.

💻 **Attacker Capabilities**: Can upload **any file** to the system. This likely leads to **Remote Code Execution (RCE)**, full control over the intercom, and potential network pivoting.

🔓 **Threshold**: **Low**. CVSS indicates **PR:N** (No Privileges Required) for the vector, but description says 'authenticated'. *Note: Data conflict exists.…

📦 **Public Exploit**: **None listed**. The `pocs` array is empty. No public Proof-of-Concept or wild exploitation code is currently available in the provided data.

🔍 **Self-Check**: Scan for **CyberData 011209** devices. Check for **file upload endpoints** in the web interface. Look for **path traversal** patterns in upload requests. Use CISA ICSA-25-155-01 for indicators.

🩹 **Official Fix**: **Unknown**. The provided data does not contain patch information or vendor advisory links for a fix. Only a CISA ICS Advisory link is provided.

🚧 **Workaround**: **Network Segmentation**. Isolate the intercom from critical networks. **Disable** unnecessary services. Restrict access to the device's management interface via ACLs.

⚡ **Urgency**: **CRITICAL**. CVSS 9.8. High impact on safety-critical infrastructure (Emergency Intercom). Immediate attention required despite lack of public exploit.