CVE-2023-20079
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - psirt@cisco.com
- Published
- 2023-03-03
- Last modified
- 2024-10-28
- Weaknesses
- CWE-121, CWE-787
Affected products
- Cisco Ip Phones With Multiplatform Firmware (Cisco)
- Ip Phone 6825 Firmware (Cisco)
- Ip Phone 6841 Firmware (Cisco)
- Ip Phone 6851 Firmware (Cisco)
- Ip Phone 6861 Firmware (Cisco)
- Ip Phone 6871 Firmware (Cisco)
- Ip Phone 7811 Firmware (Cisco)
- Ip Phone 7821 Firmware (Cisco)
- Ip Phone 7832 Firmware (Cisco)
- Ip Phone 7841 Firmware (Cisco)
- Ip Phone 7861 Firmware (Cisco)
- Ip Phone 8811 Firmware (Cisco)
- Ip Phone 8831 Firmware (Cisco)
- Ip Phone 8832 Firmware (Cisco)
- Ip Phone 8841 Firmware (Cisco)
- Ip Phone 8845 Firmware (Cisco)
- Ip Phone 8851 Firmware (Cisco)
- Ip Phone 8861 Firmware (Cisco)
- Ip Phone 8865 Firmware (Cisco)
- Unified Ip Phone 7945g Firmware (Cisco)
- Unified Ip Phone 7965g Firmware (Cisco)
- Unified Ip Phone 7975g Firmware (Cisco)
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP
