CVE-2019-12325

CVE-2019-12325 describes multiple buffer overflow vulnerabilities in the web management interface of Htek UC902 VoIP phones running firmware version 2.0.4.4.46. These flaws allow an unauthenticated attacker to cause a denial of service or, with authentication, execute arbitrary code to gain root access. With a CVSS score of 8.8 (High), the vulnerability presents a significant risk due to its network-based attack vector and potential for complete compromise of confidentiality, integrity, and availability. While no public exploit code, Metasploit modules, or active exploitation have been identified, and community discussion remains minimal, the high FAUCET Risk Score of 72/100 indicates its inherent danger.