Ip Phone 8800 Series Firmware (Cisco) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2019-01-10. Vendor: Cisco.
CVEs of Ip Phone 8800 Series Firmware
- CVE-2018-0461 - CVSS 8.8 (high), 2019-01-10: A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an arbitrary script injection attack on…
- CVE-2017-12328 - CVSS 5.8 (medium), 2017-11-30: A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to…
- CVE-2017-12305 - CVSS 6.7 (medium), 2017-11-16: A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary commands, aka Debug…
- CVE-2017-6630 - CVSS 5.3 (medium), 2017-05-22: A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, remote attacker to…
- CVE-2016-1479 - CVSS 7.5 (high), 2016-08-22: Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request, aka Bug…
- CVE-2016-1476 - CVSS 5.4 (medium), 2016-08-22: Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or…
- CVE-2016-1435 - CVSS 7 (high), 2016-06-23: Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by…
- CVE-2016-1434 - CVSS 6.5 (medium), 2016-06-23: The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete arbitrary files via an…
- CVE-2016-1421 - CVSS 7.5 (high), 2016-06-10: A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a…
- CVE-2016-1403 - CVSS 7.8 (high), 2016-06-04: CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID…
- CVE-2015-6360 - CVSS 7.5 (high), 2016-04-21: The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka…
