CRITICAL✓ PATCH🇬🇧 English

CVE-2023-20078

CVSS 9.8v3.1pub. 2023-03-03upd. 2024-11-21

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Ip Phone 6825

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 6825 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 6841

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 6841 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 6851

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 6851 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 6861

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 6861 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 6871

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 6871 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 7811

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 7811 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 7821

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 7821 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 7832

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 7832 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 7841

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 7841 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 7861

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 7861 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 8811

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 8811 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 8832

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 8832 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 8841

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 8841 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 8845

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 8845 Firmware

    OS
    Cisco
    < 11.3.7sr1

  • Cisco Ip Phone 8851

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 8851 Firmware

    OS
    Cisco
    < 11.3.7sr1
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCEDoS
CWE
Referencje

Powiązane podatności

CVE-2020-3161CRITICAL9.8⚠ KEVten sam produkt

A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execu...

CVE-2023-20079CRITICAL9.8ten sam produkt

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unaut...

CVE-2025-20350HIGH7.5ten sam produkt

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco ...

CVE-2024-20376HIGH7.5ten sam produkt

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticate...

CVE-2024-20378HIGH7.5ten sam produkt

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticate...