Ip Phone 8861 Firmware (Cisco) - vulnerabilities (CVEs)

26 CVEs, 0 in the last 30 days, 70 known versions, newest CVE from 2025-10-15. Vendor: Cisco.

CVEs of Ip Phone 8861 Firmware

CVE-2025-20351 - CVSS 6.1 (medium), 2025-10-15: A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software…
CVE-2025-20350 - CVSS 7.5 (high), 2025-10-15: A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software…
CVE-2025-20336 - CVSS 7.5 (high), 2025-09-03: A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an…
CVE-2025-20335 - CVSS 5.3 (medium), 2025-09-03: A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an…
CVE-2021-1379 - CVSS 6.5 (medium), 2024-11-18: Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series…
CVE-2024-20445 - CVSS 5.3 (medium), 2024-11-06: A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated,…
CVE-2023-20079 - CVSS 9.8 (critical), 2023-03-03: Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2023-20078 - CVSS 9.8 (critical), 2023-03-03: Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2023-20018 - CVSS 8.6 (high), 2023-01-20: A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass…
CVE-2022-20968 - CVSS 8.8 (high), 2022-12-12: A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent…
CVE-2022-20774 - CVSS 8.1 (high), 2022-04-06: A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an…
CVE-2022-20660 - CVSS 4.6 (medium), 2022-01-14: A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain…
CVE-2021-34711 - CVSS 5.5 (medium), 2021-10-06: A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This…
CVE-2021-33478 - CVSS 6.8 (medium), 2021-07-22: The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code…
CVE-2020-26141 - CVSS 6.5 (medium), 2021-05-11: An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check…
CVE-2020-24587 - CVSS 2.6 (low), 2021-05-11: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a…
CVE-2020-26140 - CVSS 6.5 (medium), 2021-05-11: An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a…
CVE-2020-26139 - CVSS 5.3 (medium), 2021-05-11: An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet…
CVE-2020-24588 - CVSS 3.5 (low), 2021-05-11: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the…
CVE-2020-3574 - CVSS 7.5 (high), 2020-11-06: A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop…
CVE-2020-3161 - CVSS 9.8 (critical), 2020-04-15: A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload…
CVE-2020-3111 - CVSS 8.8 (high), 2020-02-05: A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute…
CVE-2019-16008 - CVSS 5.4 (medium), 2020-01-26: A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker…
CVE-2019-1922 - CVSS 7.5 (high), 2019-07-06: A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a…
CVE-2019-1635 - CVSS 7.5 (high), 2019-05-03: A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could allow an…
CVE-2019-1684 - CVSS 6.5 (medium), 2019-02-21: A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow…