Cisco Cisco IP Phones with Multiplatform Firmware
13 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-1379 | 11.1.2 ; 11.2.1 ; 11.2.3 ; … | Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-20534 | 11.1.2 ; 11.2.1 ; 11.2.3 ; … | Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-20533 | 11.1.2 ; 11.2.1 ; 11.2.3 ; … | Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-20376 | 11.3.1 MSR2-6 ; 11.3.1 MSR3-3 ; 11.3.2 ; … | A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an | HIGH 7.5 | 0.9 % | ||
| CVE-2024-20378 | 11.3.1 MSR2-6 ; 11.3.1 MSR3-3 ; 11.3.2 ; … | A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve | HIGH 7.5 | 0.8 % | ||
| CVE-2024-20357 | 11.3.1 MSR2-6 ; 11.3.1 MSR3-3 ; 11.3.2 ; … | A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an | MEDIUM 5.9 | 0.5 % | ||
| CVE-2023-20265 | 4.5 ; 4.6 MSR1 ; 4.7.1 ; … | A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to | MEDIUM 5.5 | 0.5 % | ||
| CVE-2023-20221 | 11.3.1 MSR2-6 ; 11.3.1 MSR3-3 ; 11.3.2 ; … | A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow | MEDIUM 6.5 | 0.3 % | ||
| CVE-2023-20079 | n/a | Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities | CRITICAL 9.8 | 10 % | ||
| CVE-2023-20078 | n/a | Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities | CRITICAL 9.8 | 10 % | ||
| CVE-2022-20817 | n/a | Cisco IP Phone Duplicate Key Vulnerability | HIGH 7.4 | 1.2 % | ||
| CVE-2021-34711 | n/a | Cisco IP Phone Software Arbitrary File Read Vulnerability | MEDIUM 5.5 | 0.3 % | ||
| CVE-2020-3574 | n/a | Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability | HIGH 7.5 | 8.0 % |