Search criteria
21 vulnerabilities found for ip_phone_6871_with_multiplatform_firmware by cisco
FKIE_CVE-2021-1379
Vulnerability from fkie_nvd - Published: 2024-11-18 16:15 - Updated: 2026-01-06 17:30
Severity ?
Summary
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.
These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "85169CA5-F2A3-4042-9B5D-2B7CB3099A20",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "BCE9E23B-9337-42B4-BF3E-7D712379344C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "47DB6C05-E88E-44DA-B384-472484748C76",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_conference_phone_7832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6592E7FE-346E-4923-97C2-F5298DC802A3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FF507C75-370E-4BDE-B0E7-E480DB86529F",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "E2E78330-0EE4-4618-AAA4-7CA9F482C46D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "16F68A09-5FF4-4566-BE33-F23AF52F5382",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_conference_phone_8832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F1010D16-DC6E-47A6-8BF9-C1026D975E3D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "737560A3-92CE-4772-BFA7-3554799BA570",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEFD67F1-8FB1-4F27-8B97-59DF78DE41A1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "13427609-C101-4C80-8FEE-4A1A4CB99C2F",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE4960B1-22B4-4B3D-955E-684DA520A1A5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "36236BFC-B4C0-47EA-BB0F-F85974DF88A6",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5809CA01-CF32-4E3A-A771-01D5065F0061",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EDEA92B7-2088-4113-910C-3A7517E4E575",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C05A7CA6-AD58-45D7-AF32-129E22855D8E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A850D5B2-6F08-4B31-B1BD-C19CB292390B",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "90C06A12-DA6B-4D5A-9E30-2C922EB3EB4D",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "47018F64-A22E-49B4-9A4C-C98F83334035",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "67364D7B-3027-49FB-A602-8181182CB208",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7260C17-7067-47AD-995F-366A5E8B10E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8C6A3CB0-BD14-41EB-86E9-EA7AAAD76BBE",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "FCF0ABB0-9A86-4ABF-BEFD-660D61DCAC3B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F6A75A5F-3BCF-4566-AEE5-2FBD336578AC",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F0804577-E371-440E-BF96-F83336562719",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "DAE9F876-28DC-4A67-B248-D28DCB9AC4CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FDA7D8F2-036D-4BE6-852D-93F1489AC85D",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6C62D5BC-9F4F-4351-B7F8-0471D077E862",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "7DEEB93F-A774-4FAC-8415-E6B5E17BE8E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4CB427B3-43D4-492A-A617-0F178DE797FF",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E52C420C-FD54-4BE4-8720-E05307D53520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "892EDF71-710B-48D5-9893-95CB1CB9E9C0",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "1413D748-8DE4-4FC2-B433-219E25C370AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B8D1C0ED-E653-4FC1-898A-C1EC011856B6",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0CC3127-3152-4906-9FE0-BC6F21DCADAA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "32105BC1-5E87-484B-801D-5804DB74863F",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "02343D84-098F-4869-86DD-531083D65BF1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FA3367A2-BFD6-4A24-8DC7-CEF633CD183C",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7944CC9C-AE08-4F30-AF65-134DADBD0FA1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D2DFDAC7-9E51-4537-A047-89C4979B6AD0",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "296DFB8C-7843-417F-8FA5-064FEAD371AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FB9C78A8-5227-4AA8-BA3C-284A746CC190",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AF6DC5E-F582-445E-BF05-2D55A0954663",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7C9E1E28-34C1-4D5A-BAA4-9034014170CC",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "7DD8E232-3DA7-4DEE-8F0A-266AF71D804A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "60731995-FAAF-414F-925E-F6CF88870528",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "090EE553-01D5-45F0-87A4-E1167F46EB77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "379B3A45-200D-46E0-BDF9-BDA931E21D85",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "F6D2B24A-D162-43EF-B6AF-5CF4A3E66DF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "753C0E23-B5E9-4186-BA2D-528D5535DCC2",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A313E64A-F43C-4FBA-A389-6171CBD709C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A0E97226-CF8D-4DB9-839D-ACFAD7A9812D",
"versionEndExcluding": "12.8\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_firmware:12.8\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "70463F17-C138-4636-BDDB-4FB5AE991B54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "728FEB7E-770A-47E7-A9F9-CF7FBBF37633",
"versionEndExcluding": "11.3\\(2\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "43706089-CA79-4D60-9AA8-9E24556699EA",
"versionEndExcluding": "10.3\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "61315697-3308-4D5F-815E-3D52B8FC9452",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "83A4AD5A-D469-4409-9304-D5D0E41A2F0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\\(1\\):sr2:*:*:*:*:*:*",
"matchCriteriaId": "1E7E092B-161C-4470-9CDB-D1572C5803E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\\(1\\):sr3:*:*:*:*:*:*",
"matchCriteriaId": "B386A090-0804-4AE3-8EBF-7AAC69703381",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\\(1\\):sr4b:*:*:*:*:*:*",
"matchCriteriaId": "5045A77F-D2AD-4825-8FB5-8FFE0B33D8A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\\(1\\):sr6:*:*:*:*:*:*",
"matchCriteriaId": "DEB306F3-4F31-428C-BDAA-FA407577A53B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:unified_ip_conference_phone_8831_for_third-party_call_control_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D5699693-DBEC-429F-B67E-0B1625818FAB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:unified_ip_conference_phone_8831:-:*:*:*:*:*:*:*",
"matchCriteriaId": "660475FD-8475-4968-9ED2-D83461B9A5D4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "27017F70-3FE8-4027-98AE-78291BBEAA34",
"versionEndExcluding": "11.0\\(6.6\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:wireless_ip_phone_8821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F97DF354-7690-417E-B223-72C8BDA36DA7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:wireless_ip_phone_8821-ex_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0A387D7D-999D-4EA1-B878-9551893FA843",
"versionEndExcluding": "11.0\\(6.6\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:wireless_ip_phone_8821-ex:-:*:*:*:*:*:*:*",
"matchCriteriaId": "26CAE4C7-EADB-41A9-BE48-1A4F3D8D3D7A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:spa525g_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1668FAAF-CFC0-4C42-B1A3-0649BD1CBCFD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:spa525g:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B5602EAB-6507-4B5B-A05B-4FED970B43D0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple vulnerabilities in the Cisco\u0026nbsp;Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco\u0026nbsp;IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.\r\nThese vulnerabilities are due to missing checks when the IP phone processes a Cisco\u0026nbsp;Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco\u0026nbsp;Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco\u0026nbsp;Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco\u0026nbsp;has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities."
},
{
"lang": "es",
"value": "Varias vulnerabilidades en las implementaciones de Cisco Discovery Protocol y Link Layer Discovery Protocol (LLDP) para los tel\u00e9fonos IP de Cisco de las series 68xx/78xx/88xx podr\u00edan permitir que un atacante adyacente no autenticado ejecute c\u00f3digo de forma remota o provoque una recarga de un tel\u00e9fono IP afectado. Estas vulnerabilidades se deben a la falta de comprobaciones cuando el tel\u00e9fono IP procesa un paquete Cisco Discovery Protocol o LLDP. Un atacante podr\u00eda explotar estas vulnerabilidades enviando un paquete Cisco Discovery Protocol o LLDP malicioso al tel\u00e9fono IP de destino. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar c\u00f3digo en el tel\u00e9fono IP afectado o hacer que se recargue inesperadamente, lo que resultar\u00eda en una condici\u00f3n de denegaci\u00f3n de servicio (DoS). Nota: Cisco Discovery Protocol es un protocolo de capa 2. Para explotar estas vulnerabilidades, un atacante debe estar en el mismo dominio de difusi\u00f3n que el dispositivo afectado (adyacente a la capa 2). Cisco ha publicado actualizaciones de software que solucionan estas vulnerabilidades. No existen workarounds que solucionen estas vulnerabilidades."
}
],
"id": "CVE-2021-1379",
"lastModified": "2026-01-06T17:30:36.293",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
},
"published": "2024-11-18T16:15:09.310",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-rce-dos-U2PsSkz3"
},
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-120"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
FKIE_CVE-2024-20533
Vulnerability from fkie_nvd - Published: 2024-11-06 17:15 - Updated: 2026-01-05 14:50
Severity ?
Summary
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.
This vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Note: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9841_with_multiplatform_firmware:3.1\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "9B806EE8-D191-444A-9CB0-8EF45EC0DAE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9841_with_multiplatform_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "CD82CEC6-B04A-40AA-92A2-D2BABF82F2B8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:desk_phone_9841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8176E19D-B625-4891-9018-F42228F1266B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9851_with_multiplatform_firmware:3.1\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "264712F9-E172-4F4A-8912-587B6E4AD563",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9851_with_multiplatform_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "82AC8290-B3CF-4CA4-85E9-7168EE38C04B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:desk_phone_9851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "713F43A6-745A-4DAB-AD2D-3139E9E5C1A0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9861_with_multiplatform_firmware:3.1\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "318770CC-7A03-42F9-A18F-3319DDC2C942",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9861_with_multiplatform_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "8470E4B5-CCD5-4CB6-ADEA-6EB8C0AF007C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:desk_phone_9861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A8D01D5F-4EAE-4547-AB41-44F7885491C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9871_with_multiplatform_firmware:3.1\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "C838A103-B9A2-45BA-961E-91F1D8CECEEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9871_with_multiplatform_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "4379624C-C6A7-4351-A451-4944629576DB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:desk_phone_9871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3D14CF47-7581-40E5-91A1-AC6BB5137358",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "9009BA8A-1656-447B-A1E8-51ABF52236F0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEFD67F1-8FB1-4F27-8B97-59DF78DE41A1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "6A67DDDC-D240-4B70-B91A-9E5B83B05857",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE4960B1-22B4-4B3D-955E-684DA520A1A5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "72EF58B5-16C7-44EE-95CF-10BACBFBD512",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5809CA01-CF32-4E3A-A771-01D5065F0061",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "956B833E-BC37-4E7D-8EF2-72483F71003A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C05A7CA6-AD58-45D7-AF32-129E22855D8E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "91C45589-095A-418F-BE08-371ADE1A66E4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "182F4351-AEA7-4A39-B183-E931C79A0831",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7260C17-7067-47AD-995F-366A5E8B10E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "DED16F30-93E5-454C-B2B4-A41D7E822E3D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7832_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "0C2CE749-0846-497F-B9E7-6700633F3272",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "32D8B3FD-3157-49D3-A4BA-D4FAAB1B6D4C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "9C77C9D3-D99A-4F14-9D20-E0101DFA869B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "F5687A09-A590-4C0A-A8E2-9E601067042C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E52C420C-FD54-4BE4-8720-E05307D53520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "3EAC7AD4-6362-4A62-AE0B-F8B20DCE8B08",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0CC3127-3152-4906-9FE0-BC6F21DCADAA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8832_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "FF2B3A85-84E5-4064-8CA4-6EAEBD8A4EFA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5EA5C6B-243B-419A-9C60-1CDBD039C1D8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "1325B6B6-11BC-4B28-A38F-29F1AAAA41BD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7944CC9C-AE08-4F30-AF65-134DADBD0FA1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "EC47382D-5799-4147-B5A1-70249AFBAD69",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A313E64A-F43C-4FBA-A389-6171CBD709C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "D3D5B127-C91A-481A-8A36-3BE5CF7D48CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AF6DC5E-F582-445E-BF05-2D55A0954663",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "55C0B865-CB2D-47BC-B0D8-07C6F758856B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "090EE553-01D5-45F0-87A4-E1167F46EB77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "A023BAF1-0C0A-4FCB-AA1A-28A4DC8F8EF2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_with_multiplatform_firmware:*:-:*:*:*:*:*:*",
"matchCriteriaId": "745D9A6F-F862-4B68-8F03-65E7C065D1CE",
"versionEndExcluding": "2.3\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_with_multiplatform_firmware:2.3\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "6F33B09F-B4D9-4A8A-8154-D4DC6C478BE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_with_multiplatform_firmware:2.3\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "F2469386-5471-49F2-8522-EA631C68F78F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CC9019DD-6941-42F3-8B66-1F3CDDDA86E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8831_with_multiplatform_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5662424-3521-45F1-8FF3-E0B862CC5BFA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8831:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CF13D70B-1F27-4B3F-83FD-EF9688F1D123",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.\r\n\r\nThis vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de usuario web de los tel\u00e9fonos de escritorio Cisco de la serie 9800, los tel\u00e9fonos IP Cisco de las series 6800, 7800 y 8800 y el tel\u00e9fono con video Cisco 8875 con firmware multiplataforma de Cisco podr\u00eda permitir que un atacante remoto autenticado realice ataques de cross-site scripting (XSS) almacenado contra los usuarios. Esta vulnerabilidad existe porque la interfaz de usuario web de un dispositivo afectado no valida correctamente la entrada proporcionada por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad inyectando c\u00f3digo malicioso en p\u00e1ginas espec\u00edficas de la interfaz. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar c\u00f3digo de secuencia de comandos arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n confidencial basada en el navegador. Nota: Para aprovechar esta vulnerabilidad, el acceso web debe estar habilitado en el tel\u00e9fono y el atacante debe tener credenciales de administrador en el dispositivo. El acceso web est\u00e1 deshabilitado de forma predeterminada."
}
],
"id": "CVE-2024-20533",
"lastModified": "2026-01-05T14:50:17.470",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7,
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
},
"published": "2024-11-06T17:15:18.700",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
FKIE_CVE-2024-20534
Vulnerability from fkie_nvd - Published: 2024-11-06 17:15 - Updated: 2026-01-05 14:51
Severity ?
Summary
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.
This vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Note: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9841_with_multiplatform_firmware:3.1\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "9B806EE8-D191-444A-9CB0-8EF45EC0DAE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9841_with_multiplatform_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "CD82CEC6-B04A-40AA-92A2-D2BABF82F2B8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:desk_phone_9841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8176E19D-B625-4891-9018-F42228F1266B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9851_with_multiplatform_firmware:3.1\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "264712F9-E172-4F4A-8912-587B6E4AD563",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9851_with_multiplatform_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "82AC8290-B3CF-4CA4-85E9-7168EE38C04B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:desk_phone_9851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "713F43A6-745A-4DAB-AD2D-3139E9E5C1A0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9861_with_multiplatform_firmware:3.1\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "318770CC-7A03-42F9-A18F-3319DDC2C942",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9861_with_multiplatform_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "8470E4B5-CCD5-4CB6-ADEA-6EB8C0AF007C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:desk_phone_9861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A8D01D5F-4EAE-4547-AB41-44F7885491C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9871_with_multiplatform_firmware:3.1\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "C838A103-B9A2-45BA-961E-91F1D8CECEEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:desk_phone_9871_with_multiplatform_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "4379624C-C6A7-4351-A451-4944629576DB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:desk_phone_9871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3D14CF47-7581-40E5-91A1-AC6BB5137358",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "9009BA8A-1656-447B-A1E8-51ABF52236F0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEFD67F1-8FB1-4F27-8B97-59DF78DE41A1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "6A67DDDC-D240-4B70-B91A-9E5B83B05857",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE4960B1-22B4-4B3D-955E-684DA520A1A5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "72EF58B5-16C7-44EE-95CF-10BACBFBD512",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5809CA01-CF32-4E3A-A771-01D5065F0061",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "956B833E-BC37-4E7D-8EF2-72483F71003A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C05A7CA6-AD58-45D7-AF32-129E22855D8E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "91C45589-095A-418F-BE08-371ADE1A66E4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "182F4351-AEA7-4A39-B183-E931C79A0831",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7260C17-7067-47AD-995F-366A5E8B10E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "DED16F30-93E5-454C-B2B4-A41D7E822E3D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7832_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "0C2CE749-0846-497F-B9E7-6700633F3272",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "32D8B3FD-3157-49D3-A4BA-D4FAAB1B6D4C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "9C77C9D3-D99A-4F14-9D20-E0101DFA869B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "F5687A09-A590-4C0A-A8E2-9E601067042C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E52C420C-FD54-4BE4-8720-E05307D53520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "3EAC7AD4-6362-4A62-AE0B-F8B20DCE8B08",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0CC3127-3152-4906-9FE0-BC6F21DCADAA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8832_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "FF2B3A85-84E5-4064-8CA4-6EAEBD8A4EFA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5EA5C6B-243B-419A-9C60-1CDBD039C1D8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "1325B6B6-11BC-4B28-A38F-29F1AAAA41BD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7944CC9C-AE08-4F30-AF65-134DADBD0FA1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "EC47382D-5799-4147-B5A1-70249AFBAD69",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A313E64A-F43C-4FBA-A389-6171CBD709C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "D3D5B127-C91A-481A-8A36-3BE5CF7D48CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AF6DC5E-F582-445E-BF05-2D55A0954663",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "55C0B865-CB2D-47BC-B0D8-07C6F758856B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "090EE553-01D5-45F0-87A4-E1167F46EB77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:12.0\\(5\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "A023BAF1-0C0A-4FCB-AA1A-28A4DC8F8EF2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_with_multiplatform_firmware:*:-:*:*:*:*:*:*",
"matchCriteriaId": "745D9A6F-F862-4B68-8F03-65E7C065D1CE",
"versionEndExcluding": "2.3\\(1\\)",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_with_multiplatform_firmware:2.3\\(1\\):-:*:*:*:*:*:*",
"matchCriteriaId": "6F33B09F-B4D9-4A8A-8154-D4DC6C478BE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_with_multiplatform_firmware:2.3\\(1\\):sr1:*:*:*:*:*:*",
"matchCriteriaId": "F2469386-5471-49F2-8522-EA631C68F78F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CC9019DD-6941-42F3-8B66-1F3CDDDA86E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8831_with_multiplatform_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5662424-3521-45F1-8FF3-E0B862CC5BFA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8831:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CF13D70B-1F27-4B3F-83FD-EF9688F1D123",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.\r\n\r\nThis vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de usuario web de los tel\u00e9fonos de escritorio Cisco de la serie 9800, los tel\u00e9fonos IP Cisco de las series 6800, 7800 y 8800 y el tel\u00e9fono con video Cisco 8875 con firmware multiplataforma de Cisco podr\u00eda permitir que un atacante remoto autenticado realice ataques de cross-site scripting (XSS) almacenado contra los usuarios. Esta vulnerabilidad existe porque la interfaz de usuario web de un dispositivo afectado no valida correctamente la entrada proporcionada por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad inyectando c\u00f3digo malicioso en p\u00e1ginas espec\u00edficas de la interfaz. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar c\u00f3digo de secuencia de comandos arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n confidencial basada en el navegador. Nota: Para aprovechar esta vulnerabilidad, el acceso web debe estar habilitado en el tel\u00e9fono y el atacante debe tener credenciales de administrador en el dispositivo. El acceso web est\u00e1 deshabilitado de forma predeterminada."
}
],
"id": "CVE-2024-20534",
"lastModified": "2026-01-05T14:51:35.360",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7,
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
},
"published": "2024-11-06T17:15:18.927",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
FKIE_CVE-2024-20376
Vulnerability from fkie_nvd - Published: 2024-05-01 17:15 - Updated: 2026-01-05 14:57
Severity ?
Summary
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6305C250-2F7B-4AA4-B33A-9791F8ED4645",
"versionEndExcluding": "2.3.1.0101",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CC9019DD-6941-42F3-8B66-1F3CDDDA86E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "46491D2F-B16E-4994-B9F0-1AF29A5AAFD0",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEFD67F1-8FB1-4F27-8B97-59DF78DE41A1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "09BAE967-5E57-4A8B-B581-0325C9CA7EC6",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE4960B1-22B4-4B3D-955E-684DA520A1A5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C0CE82B8-ADEF-41B2-813D-3A3CD33E56C6",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5809CA01-CF32-4E3A-A771-01D5065F0061",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1BDB0A67-0DC4-47A5-BB48-2C763C5AE162",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C05A7CA6-AD58-45D7-AF32-129E22855D8E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BBEAA597-5675-4B3D-BC2B-F0527B5668C1",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8E237174-1667-4EDD-A3CF-4183319BF4FC",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7260C17-7067-47AD-995F-366A5E8B10E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E780BB38-2430-4B93-A89A-DB0FE280A84D",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7832_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "09CCC3C7-779D-4969-B28E-76E4D49E84D9",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "32D8B3FD-3157-49D3-A4BA-D4FAAB1B6D4C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "772FCFFF-87F0-4D45-80E7-8CEBB648F41D",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B7202509-F176-4882-96E6-1F8E9F2AB99A",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E52C420C-FD54-4BE4-8720-E05307D53520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "308A0211-846B-4E00-9063-1E4820CE0163",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0CC3127-3152-4906-9FE0-BC6F21DCADAA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8832_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "30BD59AC-C3E8-4DC1-88B9-86616001897C",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5EA5C6B-243B-419A-9C60-1CDBD039C1D8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "94B479FF-B77E-47D8-B00B-19AB3BEF451E",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7944CC9C-AE08-4F30-AF65-134DADBD0FA1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C4BFB4E2-4C19-4787-A7EF-23749E34712A",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A313E64A-F43C-4FBA-A389-6171CBD709C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EAF6B373-8439-4B5D-94F9-DE776FB6CE77",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AF6DC5E-F582-445E-BF05-2D55A0954663",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "90B0B215-E2BA-466E-AAEF-52A413C758F0",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "090EE553-01D5-45F0-87A4-E1167F46EB77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F7505654-64D2-40EB-BE53-F7705899D73F",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. \r\n\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web del firmware del tel\u00e9fono IP de Cisco podr\u00eda permitir que un atacante remoto no autenticado provoque la recarga de un dispositivo afectado, lo que resultar\u00eda en una condici\u00f3n DoS. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una solicitud manipulada a la interfaz de administraci\u00f3n basada en web de un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante hacer que el dispositivo afectado se recargue."
}
],
"id": "CVE-2024-20376",
"lastModified": "2026-01-05T14:57:58.600",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
},
"published": "2024-05-01T17:15:28.407",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
FKIE_CVE-2024-20378
Vulnerability from fkie_nvd - Published: 2024-05-01 17:15 - Updated: 2026-01-05 14:58
Severity ?
Summary
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.
This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "99E00AAC-CB3D-45BA-9E52-9B5A889726C0",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "CFC6D2B1-BD2D-4387-A8C1-4613BB054A2E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEFD67F1-8FB1-4F27-8B97-59DF78DE41A1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B26BE10F-ED17-40AB-B3C6-3D95624F1011",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "E8A2684A-5312-4CAC-AB98-F83B312B7838",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE4960B1-22B4-4B3D-955E-684DA520A1A5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2054AAAB-3B2E-451A-B8C1-655AB78364AD",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "B1D9BC6F-C8AC-4D72-98CE-3915BDC2410C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5809CA01-CF32-4E3A-A771-01D5065F0061",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7270E157-5129-41D2-8FF0-6985F8BD065C",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "A2D27343-7B78-433A-868A-50201A55D0A8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C05A7CA6-AD58-45D7-AF32-129E22855D8E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E81465FF-4D35-4DA4-8891-C1ECDC610645",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "42F2218A-97AD-48F3-A27F-2A87FF018BC7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E669CBF7-8BDC-457E-BA16-4114379AF277",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "3BF2960F-A6A1-467D-AAA0-1797C10DE41E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7260C17-7067-47AD-995F-366A5E8B10E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F1ABF689-2719-48F2-951C-1D3AA4F76DA6",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "9E2CE8E4-9A73-4039-B4A4-35A1D4E20054",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C9118944-DCB3-4BBB-B3E3-BF14D3B83CB5",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "A9B4B0A7-EFAB-41A6-B27D-A230F5159B08",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "67C636FD-2276-4A16-8AF9-14947A6151CF",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "68B089A1-4399-4B9A-A87A-33CFFB75792A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E52C420C-FD54-4BE4-8720-E05307D53520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "913E381D-E55A-477B-8B11-6371D5D7D730",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "7194BD83-49D1-4414-8C2D-505CED8533D4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0CC3127-3152-4906-9FE0-BC6F21DCADAA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "52407A0F-B4C8-4B43-AFFE-81121B0EECB3",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "9A41AF72-BF00-4327-B874-53FC4770608E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7944CC9C-AE08-4F30-AF65-134DADBD0FA1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "58281D77-D913-4DE8-834C-492F39E2A5E9",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "35341B23-2B89-4338-8230-C9161805EBAB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AF6DC5E-F582-445E-BF05-2D55A0954663",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851nr_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5A4675BB-0014-49C3-AC13-2B1A6E5EDCEF",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851nr_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "5AF84F2A-23B6-49FE-BA6D-D19A0881CD3B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851nr:-:*:*:*:*:*:*:*",
"matchCriteriaId": "23BB2274-7668-4B80-9FF2-EC724C44685B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2641C26C-DF8D-440B-9ECF-0C9C8076F3A4",
"versionEndExcluding": "12.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:12.0.4:-:*:*:*:*:*:*",
"matchCriteriaId": "C2957580-9796-4F04-B04B-A534BACE2AA0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "090EE553-01D5-45F0-87A4-E1167F46EB77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4D1E6F12-9864-4137-8E47-532D26584611",
"versionEndExcluding": "2.3.1.0101",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CC9019DD-6941-42F3-8B66-1F3CDDDA86E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. \r\n\r This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web del firmware del tel\u00e9fono IP de Cisco podr\u00eda permitir que un atacante remoto no autenticado recupere informaci\u00f3n confidencial de un dispositivo afectado. Esta vulnerabilidad se debe a la falta de autenticaci\u00f3n para endpoints espec\u00edficos de la interfaz de administraci\u00f3n basada en web en un dispositivo afectado. Un atacante podr\u00eda aprovechar esta vulnerabilidad conect\u00e1ndose al dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante obtener acceso no autorizado al dispositivo, lo que permitir\u00eda registrar las credenciales del usuario y el tr\u00e1fico hacia y desde el dispositivo afectado, incluidas las llamadas VoIP que podr\u00edan reproducirse."
}
],
"id": "CVE-2024-20378",
"lastModified": "2026-01-05T14:58:02.673",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
},
"published": "2024-05-01T17:15:28.660",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-305"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
FKIE_CVE-2024-20357
Vulnerability from fkie_nvd - Published: 2024-05-01 17:15 - Updated: 2026-01-05 14:57
Severity ?
Summary
A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device.
This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BBEAA597-5675-4B3D-BC2B-F0527B5668C1",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8E237174-1667-4EDD-A3CF-4183319BF4FC",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7260C17-7067-47AD-995F-366A5E8B10E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E780BB38-2430-4B93-A89A-DB0FE280A84D",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7832_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "09CCC3C7-779D-4969-B28E-76E4D49E84D9",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "32D8B3FD-3157-49D3-A4BA-D4FAAB1B6D4C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "772FCFFF-87F0-4D45-80E7-8CEBB648F41D",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B7202509-F176-4882-96E6-1F8E9F2AB99A",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E52C420C-FD54-4BE4-8720-E05307D53520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "308A0211-846B-4E00-9063-1E4820CE0163",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0CC3127-3152-4906-9FE0-BC6F21DCADAA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8832_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "30BD59AC-C3E8-4DC1-88B9-86616001897C",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A5EA5C6B-243B-419A-9C60-1CDBD039C1D8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "94B479FF-B77E-47D8-B00B-19AB3BEF451E",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7944CC9C-AE08-4F30-AF65-134DADBD0FA1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C4BFB4E2-4C19-4787-A7EF-23749E34712A",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A313E64A-F43C-4FBA-A389-6171CBD709C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EAF6B373-8439-4B5D-94F9-DE776FB6CE77",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AF6DC5E-F582-445E-BF05-2D55A0954663",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "90B0B215-E2BA-466E-AAEF-52A413C758F0",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "090EE553-01D5-45F0-87A4-E1167F46EB77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F7505654-64D2-40EB-BE53-F7705899D73F",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6305C250-2F7B-4AA4-B33A-9791F8ED4645",
"versionEndExcluding": "2.3.1.0101",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CC9019DD-6941-42F3-8B66-1F3CDDDA86E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "46491D2F-B16E-4994-B9F0-1AF29A5AAFD0",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEFD67F1-8FB1-4F27-8B97-59DF78DE41A1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "09BAE967-5E57-4A8B-B581-0325C9CA7EC6",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE4960B1-22B4-4B3D-955E-684DA520A1A5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C0CE82B8-ADEF-41B2-813D-3A3CD33E56C6",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5809CA01-CF32-4E3A-A771-01D5065F0061",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1BDB0A67-0DC4-47A5-BB48-2C763C5AE162",
"versionEndIncluding": "12.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C05A7CA6-AD58-45D7-AF32-129E22855D8E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. \r\n\r This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el servicio XML del firmware del tel\u00e9fono IP de Cisco podr\u00eda permitir que un atacante remoto no autenticado inicie llamadas telef\u00f3nicas en un dispositivo afectado. Esta vulnerabilidad existe porque la verificaci\u00f3n de los l\u00edmites no se produce al analizar solicitudes XML. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una solicitud XML manipulada a un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante iniciar llamadas o reproducir sonidos en el dispositivo."
}
],
"id": "CVE-2024-20357",
"lastModified": "2026-01-05T14:57:54.070",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 3.6,
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
},
"published": "2024-05-01T17:15:28.143",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
FKIE_CVE-2023-20221
Vulnerability from fkie_nvd - Published: 2023-08-16 22:15 - Updated: 2024-11-21 07:40
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Summary
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system.
This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CCC2C53C-D4B2-4DB3-81BC-BEA0AF14355F",
"versionEndExcluding": "2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CC9019DD-6941-42F3-8B66-1F3CDDDA86E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "DABEA69A-F808-4BFF-BA4B-98B2E6113F9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "5A6417B6-D3FC-4FDC-9248-F30B3F4A457F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5C6D7010-E062-4A1C-8794-9D736FA21FFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DEAEFE4B-1C61-4B7C-A164-1FAE945202CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "325F2401-7874-4827-8ABC-00791DD76AD8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "565CBBAA-2CA6-4FD7-816A-CF422C57E259",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "128A056A-C104-4360-8065-7240F5FB368E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "207F4636-A228-4330-A8C1-82612EC5E242",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "E963CC90-A9BF-4717-985B-869FE77441C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A4FD018C-E3F7-4EDF-AF35-1FE07F54CBAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "116B9C23-D5DF-43A2-9011-CEB5835A7907",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "50E1EE42-3AD2-4A34-A2AC-1DB924A1FA23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "91681B9B-2458-4A29-86F6-007FBE4E34A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "8F190764-5225-457A-A129-3AAA68F7B314",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "78B8A7DD-6286-4C51-A94D-B591CA5B8DE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "9EA3D40B-3398-40CF-9C37-722100DEC923",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "E2F3E220-6797-45F5-9A8D-010F24BCBF1D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AE7D4CFF-8CCE-45FF-9139-481DAF4A48CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "555FB9F8-C587-480B-B044-2037473C2FFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "EC4FAC48-4CB5-4EE4-978F-20E10AA854C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "CF301FF7-5447-4B49-82DC-F0408DE28F34",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6AA37B41-CB6D-49E0-8968-944916BE44EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "DF1416F1-4E21-404E-A105-5B5C779633D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "7FA48285-A41A-4A19-9D9A-BCFF178A7B2A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "38B73EE8-971C-47CF-817D-FDE2B3861499",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "2B35D198-8527-4414-989F-3A4EE601AFD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "D62E3B9C-E3B3-4836-888D-97FE1F0EFCB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "4788EED5-4067-4139-A700-142E4AABB2EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "4133BCB1-D7DD-4A6F-A8BA-E193E76CE98F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "82058653-1245-4BBB-B821-C0D56A02C54A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "C51B3E25-A2BE-458B-AEF6-23B5FE4A5785",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEFD67F1-8FB1-4F27-8B97-59DF78DE41A1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "E32AC898-7257-4EF8-95A4-25D439C02448",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "6E8BDCB9-4644-4B0C-89A7-13F20718B245",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "356954C9-0828-449D-B7C4-397F4CB4FBB7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "06F05CAC-32C8-43D1-9514-A9D6BA9C4BCE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "736BC586-41D0-4D71-93EE-953899AFA08F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "7499E665-158B-47C4-B53E-98440EE2F444",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "40840FDD-E661-4663-8D60-3F8851A0748C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "9083DE5F-C1B9-4D68-8A73-46D0F2B9A0A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "56729DAA-B823-480F-BB3E-10AF16A5871D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5647C754-620C-4015-8A19-1EA66ECFCCD8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "EB6A92A5-8ADB-4382-AB45-0DEDE0561CB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "9577C5B7-AC80-417E-A366-F8DB68A69796",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "760B18B5-BEC9-4C69-BC20-28DAD37BD4E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A9824121-49C7-46CC-B897-4DFAAE775CB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "0CB8C01E-1315-48F8-9842-74A563C32126",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "C263130C-904F-4769-8A11-F4873561B13C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "E6C0C169-F647-4BFE-B047-04D157FDD132",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BAC3B1E6-EC7A-453C-B1BF-9E29C565B6FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "E2D404E3-EC6A-4CE0-8E6F-1000DE2656A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "F6664CAC-171E-4DD3-B373-D15DB450876D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "FFB8E2A8-9968-4E72-8E14-5F8EB8509E36",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C161FA77-40DA-4C96-A796-2B67A229A2BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2CD91C45-D0AE-4B52-9E97-66517CEC5A5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "C1E8176E-1C34-4265-9A9C-2C3201A1F75F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "EE5A6FA8-8C64-4D64-A640-C3E964070D29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "7F8F3A48-073E-4A1D-B9DF-4B45FA993B72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "B3ADDAE0-6E63-4F65-9C14-B4606BA33269",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "F170D1B5-F5D4-412B-9194-1F96EB82AA54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "AF614C71-A854-456B-9C1F-29BFF6B14371",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "1B88C00D-9577-4FF0-B55C-1891D738EC81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6825_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "B9613F2A-3FE4-42C7-A110-DE23CBB9DFF8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6825:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E07D81AF-3DF8-4EE4-AE4E-FB875BE14BB4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "FC2BE4E5-BCAF-46C9-8216-C7EB9BCD1345",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "8C30D57A-E458-4EB0-9C20-E336A586E1C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DBADB540-9C35-4FD0-AF82-7980E1B2ADD6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C077B45A-0B1E-4DA2-832A-1B201098C445",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "A36ADEF8-9844-4F0E-B2BE-D6A786B8A2A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1A14EE59-AEB2-48B8-B08E-27FA1ED790D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "252AE700-69D2-4733-91F9-ADB3FEADC579",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "DE7EA9FF-CC6C-41FC-AFB0-4AB2B62759E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0A38A681-F887-485B-8AD1-DB50C9F2D1B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FB30CACF-FAE1-4A59-B0C3-8E0DC69EF0F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "B781D8DA-0E90-440B-9286-C64E4E546224",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "E288B479-ECED-4F62-96E9-D321EBC55238",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1C71112F-F96C-4CC4-A8EC-385E67102B69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F9673F09-8895-4360-8A2C-26EBCC4E007B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "1D6088BF-42A5-49A9-B0CA-EB359E302549",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "E35416E6-38D7-4606-9C69-C22C0A15CC1D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "47CDDBE6-D871-405A-91FF-8B1BCEAC0F3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "90C9277D-8BE4-4279-B41D-CE52920A5637",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "41B7E367-F879-4C2A-B367-4ABB9CAEDC09",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "A4665808-2B19-441B-906D-B45C5E2A01DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "AE8ECE13-617E-48B9-A1CE-F8E7A99FBFEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6D822380-B514-4377-8481-33540C442950",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "97260119-5BB6-4098-AD24-D85B8DC150FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "5B8BFC6C-FC66-484B-9E6C-B524040090C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "0D0CB6DD-F460-4C12-81C9-4C2B2619A5C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "7AF1AF7B-6659-4634-B322-D41C2E612A3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "025A3CA4-32F8-492D-8201-B261E8B11953",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "40AD64D7-B604-4B85-9E5B-6FE2C5849502",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "AC8254E1-EB56-4DA3-8F4E-8757B25B60EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "A1445458-2520-49FF-B082-99D54A2B442B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "E67326C3-A1F9-4F2B-BF3F-48CB7A3F68D1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE4960B1-22B4-4B3D-955E-684DA520A1A5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "243CC805-613C-470E-B582-B34D606C0067",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "CC7486DE-BC09-43D3-BA2F-0DD3BA5EDA6C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8A93DB06-29F8-410E-8C36-B05B386AB644",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F6FE22B9-1DB4-4838-A0B9-DBCBCE3D11D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "CF247772-C2E6-4966-9DEA-8F52C579C6D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "9E845D7A-AB83-4D92-A7B6-EF5A3AEFB379",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5A413900-C751-42A3-864C-3BB9D0F24497",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "7806B918-B0D6-4F28-A16B-42508F9A358E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "FF443808-FE52-4F40-8EE8-2FEB817E101B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "09F181EA-C7E2-4CFF-84AC-B1208FC315C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "65B1C3D9-6EFC-496D-A032-56867FEC87D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "1D0E21D9-F786-48C6-BBFC-A38037BE6509",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EEF35587-AB88-47CF-AC6E-A4357A00C7C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "D0D0AE34-5311-4014-8418-989829131707",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "12F86BCF-0776-4427-88B8-9CCBDD7C8C7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3DBBB40A-1D31-469A-9453-60B0D26FFE0C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "A821497C-51CF-4FA5-B305-F73967B98DF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "004E0452-C797-4514-A85B-570BE00F7D21",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "6ECB6488-E463-4B2F-A042-77B1EA5F38F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "30CEA593-1AFE-42BD-B9EF-BCB884B76E39",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "E990D32C-8488-4EEE-A528-FF0AB7A481EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B209B18E-14D0-498D-A440-90308CBDC532",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "F9328205-20BA-4E86-AD7D-E387F4D24643",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "410DB7FD-26CE-4CFB-9B0E-D72723EB7B15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7AE675AA-9D98-46E0-8F28-6DB19E15A319",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E75BFD2B-9596-45A3-9FFA-95EA467A68DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "22AD1216-C14C-4900-ACAF-082FA588A2C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "C3A630A1-0490-448E-A224-83F5F711A10A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "2E373BBB-28DD-4C6D-AF44-D8E1F03123A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "649A1967-61D3-460D-B69A-C04FF45C3B1B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "8F368949-6CA0-4E08-88BE-4EE65FC426C0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5809CA01-CF32-4E3A-A771-01D5065F0061",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "E916637C-7951-4B97-8D09-8AD5819805D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "7472F127-BFF3-401A-957D-27A115768BBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DFB5E611-1A60-4905-9D7C-0D0ACA16D00A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "207D658F-8EEE-4225-8B99-98A6D9097DFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "120A1C31-0997-4E3B-9EB6-24545D54D282",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A0C5B601-0F05-463E-A6AD-499CFE0D898C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EF1790DF-DFE0-4542-A6B9-E6D7FDBF4B87",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "4855D3B0-0A9F-4282-8F2C-BB8FFFB274F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "1BC3FCE3-A00B-431E-86CA-669BD878CC0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "7731918E-CBE1-4A06-A5F4-E917AA6F4BFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "D8654298-8F59-4C7E-8CE0-158362691746",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "E5E4EBF3-3DFC-44C6-A596-3F3CED7D6AA8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "ECFB53DC-8F34-4380-A800-1CAB05459F4F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C26AEE8D-64C9-4010-ABFB-6A624C4C85D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "B4FA7637-F229-4331-9E20-5261A715D5C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "718B5D68-CAB7-46B3-92DB-F82EEAAD5AA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "023F69F8-B004-40CE-8CC5-B9DA48041D67",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FD479DBD-5567-4E2A-BA3E-88C54B36557E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "884DE708-ADEC-4C67-BABA-5589C498D6F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "FDE984CA-2356-4926-88EB-966A51A7E190",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "68A83E84-E46F-494A-B5DC-0AE5990F345B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B5B79DE0-01EA-41DD-AE61-1954E21FB3D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "7183A8A5-E2F8-4B8B-9473-BDE00701504A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "6B2FC572-4BBE-49C2-8747-6B05D9D71611",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "54FD0FE5-7B58-4C72-8806-C7C12DD157E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C627B8E5-7DD1-41FE-B100-B299EDEA9D04",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "97787F93-231B-407D-B8B5-AD4D441A88B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "929BCBCC-FD70-4FCB-8464-DF4EA54C62DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "FC4542F5-CEF6-4315-8488-DC853F9F04EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "5B8B602B-F136-4188-BFAA-40F4F7009CB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "98E3BC9C-29EC-47AD-ABAF-61182DD3679C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C05A7CA6-AD58-45D7-AF32-129E22855D8E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "319155EB-2E83-4E3B-9344-CFE8F87FFFF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "CABCEB46-40BE-41AE-9309-7EDBB1864021",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "69A356A6-8DF1-451C-B340-D616917CB6E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7BA43F41-FEC3-4554-AA51-952C7495F76E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "C0586121-D5FA-487A-AC4A-A9FA7CB3D5A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B5D4490F-BC70-42A6-992E-561E79BB4F88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "03A8BE52-45F9-45BF-BFD6-5D60ACDA44D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0D721451-E61F-4506-8074-879482CEC6C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "2E4F2BD7-4FAC-41F8-9F0D-7AA960DAB8DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C247537A-0143-4C84-B286-E504C3D597DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "9EE85AB6-5359-44BF-8135-0C1C3E112FE0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "DA349972-CFD3-4D73-991F-D40EC0114DB9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4A8ECD88-DC55-41FA-9168-D4D18C5C95EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "294AB20C-68FE-4760-9426-679D35564B13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "FC08E877-0E50-4F6C-AD10-00D404D05ED7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "E09BA73B-2F17-412F-8F13-0823B3E0F4CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "580BEE07-3842-4B93-A593-9EDA5654E97F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "08CCBCF8-34A5-438C-9D47-5430CE7B9231",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "5DB5F276-E28E-458C-B574-04B80B836257",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "E76A0966-0B20-4874-AAD4-F9882C4740AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "60D5E553-E050-4EEF-A937-EF823FF5C1B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FA1FD438-0B82-4AE2-82F0-F66C10387114",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "C5265784-E97D-4DC2-83A2-3030BA269ED9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "8FC0DAA5-EA0D-44BC-B092-7D7B0DEAE300",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "77F4BF12-3267-4FF0-90EC-97A749BC5DAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "58F947BD-5B1F-424F-82D4-4FA0ECFED656",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "206107B9-A75E-4025-AD08-1C67A79BBCDE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "A58A59BA-F531-41B9-BAFA-085EE678B6B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "0F9FA370-9A6F-43FF-8F81-9FA1E20F570B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "4DFB76AE-13DE-4A28-984D-48203A1CC943",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "B94AE3B1-D11D-4606-A90D-8794F1C08F0F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
"matchCriteriaId": "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "DAC12C96-4052-47D4-B9C4-6F9E964D503C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "B41C0F3B-E3EA-44E3-8AC4-243518BF2E41",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CABDE7D0-114F-40BA-BE3D-2548321DCCE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "43E0AAD1-BE95-464A-A011-8DD8391B7635",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3CA4D75E-7788-4A82-81FC-B0DC74DDB387",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C7D95B5F-2263-4990-BA8F-F8F42C10C436",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3D8E15DD-CE4D-4D24-A840-5D39BF3DCA48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "F61EA433-3B1D-4EAC-898F-F2BC392E5C54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "A134FEAB-59CA-407C-99F3-3B7BC5AE007E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "12AFDD04-CBEA-42FC-AC76-E7578E9D1AE5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "265975A3-D905-430A-B37E-FFBF04320605",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "F2CD131A-AF4F-4993-A296-86FB96C5CF5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DCB81153-7067-4894-8733-FF4942D5BEB8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "8601FEC0-0178-4B5B-930A-72E377A69107",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "CD56D3CA-5825-4AF7-AAD0-C9AB832E3943",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "9CE69435-8F8C-43A2-B293-140A9F40167C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "3F9C58A5-C9B9-4A18-A9E1-651ECACD68E4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "49E0C17E-91DF-4AC5-92D3-4C306BE8F47B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "77594E0C-E791-4F73-BC6D-00106F7E8B5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "1E047EE7-5717-49D0-A517-8FE3E4D7BB77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0B8F67-E5CD-4046-8AE4-9DA435967FEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6261EC02-0290-4CE1-8E7B-14449725136A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "FCEB42E3-B3CE-4FAF-9BC3-F4230A6A8082",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "BCD446B0-0B80-4E01-880E-91CB9E1D82D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "CAE5C8D7-3BE3-4BAF-969D-054C3ACD88C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "5E5C60C9-3B91-4C08-B204-FB276466FCBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "CDF0AA53-FB70-4D1E-8239-ED6BEEBD92C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "F780C93B-296B-47DC-ADAD-3964F559C036",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "0D6CEB43-EF96-44D2-8E42-155955BFEF4E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "FCC9A9AB-D2E8-4743-A1F4-D6E351412933",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "5EA2EF10-1A1E-4FB2-A00E-3570E53EF559",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_conference_phone_7832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6592E7FE-346E-4923-97C2-F5298DC802A3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "4A2D7396-22AB-4E8D-817A-76AA1D8ED48C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "9AA4B443-32F2-483B-969D-9A90DEF37406",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "06A810B6-0650-48CC-89F3-6F732420D93A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "31CCCD48-AF6A-466D-87E1-266820123DA3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0F4F712E-A1EF-479E-BD1C-9F35C37F9526",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2BFC4715-CC63-4827-AEC7-2440A641C6CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2D3412CB-A737-4FC5-9C54-8DF5586C719A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "9EF303D3-879D-430B-9D90-DAA79C3FC78A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "F164260A-63DE-4DAD-8DFD-3396ED3D7949",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1A0A2B00-68AE-4A78-AA00-11E6A1F12A35",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "86B3695D-2613-4E92-BA29-3E341CF2DE7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "A91DFD5B-FEAB-4894-8799-A755CE06BCFE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3BC16B50-50C5-4868-BFD9-F0BB3D3C91CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B8CA3369-438C-4FCE-8766-CE9540383934",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "048E8797-DAC8-41D8-985F-FE5A83A8A961",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3F8DC25D-67FE-40AE-BA38-A0FA3FA9A503",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "578F74E7-8234-42EF-8211-C3857227EDBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1D603C7E-E740-45DB-999F-83D25F51A8FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "4A9F3F64-E30E-4BBC-862B-427D8D465624",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "B24EA7FE-E7C0-47BE-B02D-7E8B840D14A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "53CDF5E7-E5F2-4EC6-B4D5-513905B87CBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4D6CBEF6-000D-409A-A4E9-6D650AA5257C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "5F74C833-16ED-4E26-BDAC-8B5DBCD0055A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "C8B5429B-BEC9-44D7-BF72-028B5272FB4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "45E16BCC-A22C-43FA-AA82-19BB8F0AE16C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "1E94B4F8-2D71-4C67-AE1F-42D9B441F55E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "297DD17F-C172-4681-A7D0-B73C73036C44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "71AB1DB1-B2D4-4ED2-B070-6C1DB03AB88C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "A9048DAF-D539-4187-975E-64C7461FEC75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "1BDA1C93-1D77-4EA5-9ECB-DA6FEB6BA6E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "F46C1053-BE8B-4117-A084-7AC8940F359D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7260C17-7067-47AD-995F-366A5E8B10E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "D3DA7CE7-C894-41C6-BB20-FF6C4179EADE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "73490566-91DE-4B31-A159-D24D7ACF2973",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "35C19765-7AC9-49E9-9057-85895D22F827",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "15782A3F-1D76-440E-99C5-BB992E473A66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "451B569C-0670-44D4-8C6F-3361755B0EF7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "DCE3C285-8584-45D9-83A6-525D6D8B3073",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EF5F8B2B-1EB3-4C27-9485-3562B66A85F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "16CD80E9-D861-4E16-A194-875E4B9507A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "68DB276A-4B6E-47F8-9030-5D740F6E0766",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4363B65A-9D50-4353-B8B8-ECF2CC1618B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "4782D308-FF62-4ECD-B8B0-FD13CFA241A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "701C3763-F0FA-412D-9908-73B1DBE07794",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C2912370-6F61-4BC6-B939-CF6616997C58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "678E05C2-7BB7-4EF4-B3D5-90BCEA2E32DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "E15F943A-3492-4480-9AF3-1ED4E9BCC7C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "12DF1455-6F97-4DD0-92FA-31F13C7E5B27",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "0EAC1711-74B9-415C-A530-2400F22F0701",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "11A4A14C-2AD8-4B5B-8E86-C59246B360F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "950A77AB-4CB1-4255-8832-3F6D7D220AA3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "B80DBBBB-7DCA-4032-899D-FCEB3DC4FBF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "9CC528E3-FC10-4364-85AC-A4168A6AA2BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "ABC10F2B-1965-4826-A82F-2A46C04511C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D824A2EE-D0FC-432B-AB48-F6A4756897DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "6AB3729C-3B70-4D29-A0BA-8EF856307688",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "C6F8384E-A69C-4B42-AF15-A3B69067A150",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E11E46B2-9D47-4178-B0A4-C9B8B2AEFF24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "418D5591-6D9B-49DF-80D5-4B9BD8D63619",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "D8D53052-659C-439A-B857-AC773378F6B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "319D55B7-75AF-4F7C-9CBD-CE3CCC426E46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "1B6D6353-733E-46A0-B68D-E023BE05F85F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "D30380D4-3A23-4788-A970-43E4D2E6E8A7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "F03DD6CC-F7E9-4F85-8B59-FF29AC39143F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "5323790B-7D01-43C2-9F2E-0EA461696E2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "711D5019-EB05-4DAF-BF72-36E17206685A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7EA81344-8D42-4226-A572-B0A90F564618",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "8ED50204-80C3-4F38-9713-DEB8B0CBE112",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E1564453-362A-475C-811E-65CA3907D568",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E242292E-6874-4CFD-A573-AC3EDFB45746",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "A44D6295-256B-4503-8707-83E6B681C24F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "07047B9E-2F94-4518-BBEC-86E6AC51ADC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "920B9D68-4CC1-4980-9A3C-07C6C90C2011",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "6DE550A4-9412-4ADC-BA6F-950AD4F72B4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "37664783-263B-4EA8-AD01-67B96BFFF553",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AF17F64F-F378-4B4A-9C8E-AC44BE0B05F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1FFE9D23-4798-42BE-8D85-8ABE65C862DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "CEE12502-8DB9-4C1A-8BF2-2AA2877A5BDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "2D6E6DB5-F415-402E-A296-C49FCF33883D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "2809B892-17B1-4A0A-9E15-1725A8E6997D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5C2EB1C5-2D36-4A6D-8F92-223F46CBD056",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "23C6474E-4F9D-48ED-A03F-DB087BAE0B64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "1C294B37-610D-4B5C-8ABB-F90129B7BE70",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "EA3F04CF-F9CB-4830-ACEF-FFDA432C627F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "9C81514B-DA75-4906-A70A-543645975B24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "0B4EE2EF-AEBE-4B44-830C-C6C104782152",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "634D85D7-CA54-4121-8109-E8EDC35A41EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "E43CE640-9139-4910-845F-D61B03E3BCB9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "90F0B54D-EA6C-4137-A344-7B85CA3E0A83",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "0272102B-CC8F-4519-A199-8FCC4BEEE9E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "549F3BBF-2DB0-4C74-9A9F-6FB5382E5189",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "912231AA-C393-4975-8989-652F5F793685",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "82249A4D-4640-4D25-A69A-F5F2612665F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "56425029-060F-4220-8716-417B8D8F9845",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "5F449238-0BD2-422D-AFA6-9443E6C4A8C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "3CEE1353-D87B-4CD3-AFD4-82BC5423D91B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8F889562-3DD3-443A-8590-50BF86AA4F76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "69DDB246-F153-45AD-BE18-AF7636774D05",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "02F84C06-CE22-4F0C-B808-FB04BCCA54C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FC501BB9-D464-4955-B70E-0B2A7A33C9BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "25558840-42E0-466C-B7CB-A7B9B20B15EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "10942B52-81ED-46F8-A2BD-2BD37A9117BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "ED4FA6BD-B1C0-453E-BDAE-735CD915A2A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "8826F8C0-2056-4144-993E-96517F83B9CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "059EC856-BA67-437C-BE1A-0F161C402EA3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "EB4FB0F0-08E0-4017-9EDD-04D85A3C9544",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1409B505-E7EB-4FCB-825D-68FCA2A33579",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FA7AEF19-A419-42A8-916B-62A09F3FB16E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "91D3F598-B3B3-4B6C-8EFD-2F8B71386A79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "DBCBE62D-1BDD-48EC-9BD5-ABE505C21668",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "80191538-8561-4A6B-8E61-12C7C0E56A79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3C4B2C94-562D-4095-9C30-D0607AB73274",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "5A9D1167-C959-4BE9-BC3A-6F5B2B02D0B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "AB6ECC98-63F7-44D7-B1F1-A5BAF06C765B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "1DB291B1-D3AF-4847-B1C3-42C393B5144E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4620A953-1FBA-4493-99C8-D7EA33684677",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "6BCA71C3-A320-4AC3-A076-573B3E76217B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "45F69715-462F-46E6-A43D-78E55E85D49C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "C4A0E4A4-491A-41CA-9AA9-A250F9FD5928",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "60420060-F3E9-4267-8298-AD27F83753DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "3165D2DB-0D52-4CE0-B068-2FC29C2D910E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "545E3FBA-A50F-4464-9522-2A122F6024E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "1F2C175B-8477-455D-A3F4-F1BBA93ED1E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "2DE7287B-ABED-4F89-99C9-B379A8B3AFC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "63044AC4-E62D-441E-BCFE-16BD2BF958E5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E52C420C-FD54-4BE4-8720-E05307D53520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "925B4CDD-D482-442E-A092-0593F7E8BC86",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "05335BA3-C452-42A5-8494-1A0815F94003",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8032D5B8-8A2F-42F0-BA5B-389297AD1BD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "927B3871-9E88-4C1A-A0E8-035AB5114FB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0350E26B-3410-46CB-9FA5-D97BE4453A06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "199F9108-3831-4E6D-8163-F9E91DED3EB1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EAA02306-07BA-45C3-9390-7F2595C1A44B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "6E98AF51-57CC-4613-BC16-039602548F57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "6C57350A-E295-4140-B67F-B9CDA6BC5C03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "9CFF0D9B-A151-45A8-8410-F242FCA0F776",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "95146F05-4807-414F-A650-09751DF44770",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "284DFB55-8FAD-4586-B91C-68C94B2689A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2F1EC232-6DF6-467A-8264-249899B93692",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "8D39942C-A7A6-45FA-AAD9-5373DBBC2713",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "B22FA4A8-D59F-4E5E-A7F1-73AA9D15326F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "992CAE24-643E-4CD1-A2CA-44664C1DCDCF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7CE092C1-6DE4-4C0A-9120-3E67A48878B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3D3CA5CA-069B-4A09-9118-9ABE3D06AF5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "D715A726-527F-4ABC-BBA3-116E6B0DC65F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "15CD8AFF-4ADD-4105-B719-604A2050C4D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "DA097C40-F063-409A-B355-4721EAD12DA0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C62E6970-DEF3-4A8E-BDB1-3A297C42736D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8A05054E-1743-46B0-BA2A-50E0DF42544A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "783F63E0-3BB0-4770-AB01-A4A1127A4FBA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "B11A2C76-28EB-405F-9C03-B71C92C3ED23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "667C9C62-4E06-4420-A04C-0566D18FD0F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "528FDCE1-E110-46BA-82C5-BF9F92CBF3B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "93CCEA69-D71F-4620-A59D-96DE286EDA78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "05BCA2FB-FE1F-427A-983D-EAE585BF7C3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "9F5E95D0-E4EA-4E8D-ADF7-B8E3654E3AD1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8831_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "D7986EA2-5C2D-44F7-99F7-2F3EE0F1557D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_conference_phone_8831:-:*:*:*:*:*:*:*",
"matchCriteriaId": "71D931AB-034B-4061-9156-039010ECB648",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "44840ADC-C771-411D-BC4B-4D885F483C73",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "75A0A159-1F94-4767-9BFC-43CDF9FB5213",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C41A449C-F8B7-461C-B7DA-9A240C157A07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AEF4B3AF-D0E8-42D8-8586-742C870D371C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "71DAB4BC-C020-4C03-891A-D7450B786598",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "31D3046B-8C6C-44FB-A231-AEEA9168B54B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "603B3EB7-5E27-4E65-87A1-91E94AE088B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "4743476E-B76F-4AC5-A5AF-4E49B2D3C2E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "EB3460D6-D43E-436F-B01A-FFDFABB46830",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "9ECBE27D-A7FB-4F3B-A19E-3DA2D99BEF34",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "6A7CFD51-3F85-44AE-888C-4F8372E45D9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "F18B906D-F88D-42F7-8BA1-145EDB2401AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3B2F3CAC-10F6-4D64-90C9-E46DD672F2AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "350D9A32-911E-49E6-915E-9210A5560150",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "F58F39B0-E8E3-4AE0-960F-C6C28D92C505",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3A3783B1-AFAD-46C8-939E-53AD6234AFAE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "9325345E-8FB3-4360-83BB-FEFA2904DD3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3FA9B687-BE83-4597-AC7E-A2E0FE705415",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "5AE24180-48E8-4B95-B6E8-EF3C900D87D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "B0CB76DA-9077-4D6B-B555-60F695511743",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "3B9BAB23-FAF3-47F9-952D-207211A7C115",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "70F8D873-703A-43C9-9EFE-CA57A795046B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "C772D6D9-F6B4-4A32-B49E-F2C10404A384",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "05645278-6903-4C42-B1F4-116615976113",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "01E1B2D4-06E2-4584-BF76-7F6FAA21F06D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0218B816-6FA1-4BE0-BC6E-277C17A5DB67",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "E5726EB4-B1B6-4DF9-9263-D8B5742CEBCC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "E345118F-4326-4A07-BF68-E59407589AF6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "E4087699-0424-4C5B-83F9-399E2781381A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "60C056BA-9EF4-4D89-A7EE-96A8A0592266",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "B25E6A71-08F9-477C-B313-235CE19935D2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_conference_phone_8832:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F1010D16-DC6E-47A6-8BF9-C1026D975E3D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "F1B4FFE4-C7E2-4224-81AA-CE310D6F5B30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "2CF5AFA3-DA14-41A9-8969-EC08578A7B5A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0477E171-F551-4C6D-ACDD-9F73F236A26C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "051C4B11-1134-4593-9C06-A4F7F2086D31",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0066BE4B-A511-4BC6-8208-B9C102C1D3DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B9B3DE1C-20A0-4FC2-8E9B-19FEB6170BF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "664E161A-1639-46D0-B624-E82B94F6F3AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "649BEEA8-7C75-4D54-B9F7-B7109C491CED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "2293C16C-4253-47DC-8B34-BCB6D5345D69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "8D6BDAEE-9392-4572-A3B6-289B7C7E8DD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "F6187843-9D97-49FA-A324-98A826427160",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "D0A87A43-8FD6-41A4-8401-4436CCA82509",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "97330FB4-0A61-44EB-A4E2-44CE8A0BE152",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "572569A3-2B98-4C99-B881-536E5BCAA92E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8D41E9AE-DE06-4C37-BB2B-63D324E1E19B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "105A04F5-8225-497B-BA54-9C833348B2C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "16FCCD31-EC94-48B7-B891-6C9B6A4D3E59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "CEA972AB-B368-4D07-AFDD-0BEC951FD759",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "11D76A00-20A1-4EF6-8250-A65EE320102D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "6A81EE63-1E69-4361-8196-8360B7CC4AB8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "919074CD-DEB5-45BC-9069-FC38934FD3A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F9D6A89A-AC97-4261-8A9D-AA629927078A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "AC5B6D6D-5AD3-4D42-99D0-77CFA898B01A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "3C8D6DF2-DBE3-4D46-A047-54AFDAB0F6F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "0E5E4DDA-E4C8-4161-A3D9-CB1473FAA918",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "AD8D45B2-5FB0-42FB-9724-B8F036D3EA56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "A4ADDCF0-6D19-45B0-9C5F-DE8D6D210F02",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "73DA8441-972F-48D9-8155-0532438B7504",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "8AF826B4-1829-423D-AB48-9A19B0F2F304",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "325EB932-6054-4B55-BA14-8A704E26BA6F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8800_key_expansion_module_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "271A5A6C-B5CC-447D-AF06-64592BA186F5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8800_key_expansion_module:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0CDF3D2A-D68A-4B0B-B16F-9B137FE2E1C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "AC9BAFC5-C637-4E1F-A2FC-73EDD24708F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "1AC2AF6D-8C20-43C9-ABC1-A1B33B2DDD6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2F038B43-4F5D-4A5F-9C4E-7F0DFABB7AA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "10D0168D-2E5D-4EC3-9026-E2B00DC2057C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "B68874B5-4985-4A55-A49E-E73C53B3CB73",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "340E76AE-9AF2-4AE4-945C-BBD6FEA0C4C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "723573C1-35C3-43CC-8FE6-01B8686192D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "619BD39F-10FC-43D1-A862-456586C3A430",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "F045224E-23BC-46BF-91BB-E12B286E3334",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "674AACDC-48EE-4A29-8871-952D508F9F34",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "B929BC34-3B5B-445F-9C95-B84E65490CF1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "9566B3B3-3B42-4750-9B2A-4F84D918982E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "CFD4BC35-E46F-4E87-8710-5807D8923394",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "489726C9-307A-49E0-9B9F-A26A9D3BA5E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "C7A98DA9-E72D-4F15-B008-C1A40518D83B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "B8FFDF6D-DB3E-44FF-8C9B-0D8548AE8804",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "80E92704-41D9-4802-BEF2-607DD2635854",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5F02588C-C56D-4951-9949-CE62A151A5F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "BB74D839-CFB2-4D28-8445-0151C6B14D03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "B019D8C7-6B34-4A15-86BE-260B80EC89A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "69C612BF-029B-4873-AE41-C107309D189D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB08A151-98D4-42F8-B14B-E0C2847EBD30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "0760E92B-16B7-4177-BD1F-5A22EA1CFDDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "715B53F0-099D-45C0-ABF3-91028C2AEA69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "436BC808-6B54-4387-9575-42F80E2A925A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "4BC1BAB7-9825-4A91-9441-EC13D55DB648",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "DB25358B-589D-43DD-A20A-9C4193140A8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "31FB0596-C9E0-42D5-AB6D-B8B82A1EEE4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "88058E00-C3D9-464E-A226-3B97BBCF9E62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "8E87B6F7-0753-40F9-8E2B-858D626B3E06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "511B3B6E-528A-4D84-B0DA-13EEF484CC4D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0CC3127-3152-4906-9FE0-BC6F21DCADAA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "3C296AAB-FC65-46D8-94D4-BB728C419FE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "B778707D-02EE-4FC1-8406-CA79039A602D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6DCB1EF2-67A1-4159-8FC5-8A155061CEE6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E67F17E2-B5CD-40D5-BDB6-122AC9B3E4E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3EC84E9F-53F0-43EE-BB11-66FF0C01A392",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "ECBEC8C6-8617-4745-8847-E676E634A37E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E7735FC0-FE8A-49FE-AD35-4A15514B2E1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "35ECAFB3-E81D-4B72-8A9F-926D4E30B2FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0384CB13-ACA2-4219-B61A-CE472AEC42A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "762D42CE-E175-4099-99D9-C27DF4DDC96D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "B78565A2-2F03-43EC-A290-BDE534DC7142",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "9EC50185-33A4-45A0-8FCA-DEB9EDEADED3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F397C5C0-8DA9-41C9-8531-821F098AD203",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3E5F2E80-52C5-431E-803E-9D91D4A48549",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "F890F47E-575C-47C1-9658-95A0CF6C35DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "5981CF41-2548-4323-AEE0-B1E827F346DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "D7A67BB3-DFFC-4117-B01E-96F04D90F44E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "551BCF57-8461-4EB9-864A-94D306CC748C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "0C804C84-5E61-4445-B7B5-435BD367836A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "1A6C776A-B236-48C2-8F55-C8CC0E0B3621",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "A4B584F0-5381-407A-B087-1143BED263AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BF6CEF1D-8ACB-460D-89C2-B259CBBB4A50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9B9AA167-B21A-47EA-BA0A-C690548A0D7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "7B261AAC-212F-4924-AEAB-088254B2A943",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "841F097C-A61C-4954-9081-5F81F8AC71AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "657CF7A8-A81D-4F07-BD15-4AA056ED564C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "CC3D3F94-718B-40A5-8029-1F9401B1DD3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "AFE2F35E-AF83-47E3-8135-49DA4D059C4A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "DB2FB07B-9EB3-45C0-B647-FF2FDEE7E0E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "E9FF6B0F-7CD2-4720-831B-9CAB2F0E3CBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "6E1163A0-F4AF-4A5A-9F3D-AB7148210B9F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7944CC9C-AE08-4F30-AF65-134DADBD0FA1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "5E62050E-83EF-4FB9-94B4-4F2F015BF876",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "8D1A84BC-B4F9-4C55-9DFE-C6F8D780BC03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7FFEB151-C625-4460-BB36-D0F96AC3ED39",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "48C2F7ED-64A3-4451-BCA4-129B103C4563",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "045AD916-F7BD-47AF-A4F7-65220DD7A6A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "0237D11B-5932-4278-85A1-804DC35C1607",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5D214888-2441-41C1-B4CD-E27B7EDEC1BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3ED5C195-CBF4-4FB5-9D5D-7C7089386A58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "18BE37E3-529A-4116-BEF5-3CB64A516FC0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "9F33CEEE-9108-40CC-85B8-B0F5EEB66E7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "D60C4195-A37B-4F60-9E90-6DD683DC77EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "7EAE6495-1E91-45F3-9C77-01C8988E1D53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E037CCA1-F4A3-4ADD-B1FC-C15DE2B1FDCB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E1F9CA9A-1129-4EED-BC24-05C63CF120ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "FF1568C6-188E-4E0F-B226-75ACB9AABA91",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "7DD63F11-5C36-46F8-9526-C842D114AB48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "3CE7645F-F4A5-444D-BF6F-A3005170E6E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B4FBE26B-1254-464E-A94F-1DDE40DED972",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "7CFC1CEF-54B3-44F5-9A22-6A8C414B19BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "33BB0E64-BA3F-4693-96DF-967EBB4F5D45",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "F2779379-8297-4580-A38E-9EFF46E662CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E98D9E04-3F48-4ED0-9740-BB43DF730432",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "AFE05035-B3A3-45DA-AA8D-B39AA1051A82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "F0A8B53C-8C75-42AF-ACEF-C57B93B34A8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "FEA0573C-190D-4B22-9BBB-A715E02D3A67",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "34A30151-4114-4D93-BDE5-5A6DFDFD66E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "F1412B71-4295-4C69-82C8-A8FAC4812C4F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "DE61C8BC-10AA-4FD3-BCD4-89B519D06CA9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "D03762E2-C3D1-46AD-A319-4E9D12BF3CDF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "B13317BC-3BF3-471A-AE5A-B97622B6EB84",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "C9D79ED3-6D47-407A-B22A-6752C9F06168",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A313E64A-F43C-4FBA-A389-6171CBD709C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "2D7D7C6F-9E65-4C9C-9CAF-2677D3DAB422",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "C4FBC2AD-0CC6-4C56-BE96-0A5FBCD9A3EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "75B5C3F4-D573-4FDE-A626-EE7D4449B0D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0947C0AD-DBB1-44A9-A4E9-714C030FE48A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "D7F831E4-7DD8-4840-A797-EC25BA20FC95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B41968BF-F0CF-4D0F-9E28-FF7012507248",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "073457DF-0B68-4EB4-B494-D00AD4941E7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "EB5C5C7F-E37C-4F74-9C4F-4B510D7675D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "BF442016-A3A0-4170-B90D-D51065ECF4A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "EAAE48DF-0CA1-4AED-ADA4-C68193BFD30B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "ADD2086B-C210-4764-B30A-53DE87A7581D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "4585B8D2-209B-4037-BC17-435429A33981",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F1E9CAC5-F2AF-44F5-8D16-D9ECBAA42023",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FA06D8E8-B9D6-4D0E-9835-B9FF748D99BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8DD5E5A9-35F6-49C4-8AF1-76034E7A14C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "29923F8D-10A0-419C-9971-5A6911A785E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "60681C28-C0CC-4530-B8F0-C480D990CF7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9588942C-49B2-4CDE-86BE-351043B8952A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "7868ECBC-3A91-4C9B-B434-A906A3E4933D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "2F1FFCEE-5733-4FA8-82FA-100CA9356C74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "39838207-BFCF-4D50-8F0D-CB1F803713DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "035D8DAD-28C8-4F17-A111-6F3A9ED0F794",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "1C479BF8-CB2A-4FED-B73E-37E196D7020A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "100B2F4E-52AB-4C95-A498-F264DB882FB1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "2CA22313-0B4B-4A9D-BDEF-F9E973C26552",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "9E3AFA22-0827-422B-A000-8AECDC25C4DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "052EC44A-48DA-42BF-8122-4F538273A8A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "20E83CE0-FD4A-4020-A6C2-676EFD5A3AD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "52A82461-6C35-4059-87D3-08CA394F0F73",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "4699E9BA-AF1B-4821-820C-9DA874BEF387",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "16828690-DAAE-4EB8-A9D3-2A49FAAEFA5D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AF6DC5E-F582-445E-BF05-2D55A0954663",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "B4C42B43-CA61-48DD-8478-43592FFA06B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "31AD798B-D1F0-4767-960D-AE1366B09A3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1AECEE3E-AC32-4260-BE9C-289B77870502",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D7A9E3D5-B353-4D95-9A72-41E160759C15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3A859DE9-C63D-436A-8C4E-BE1EEE142B57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "8A215146-4551-4451-A386-07855B0D72B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "67E59E08-4822-482A-96F1-02F677B914FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "2B7562C0-549F-4886-816C-888E2FA30C74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0C8A2029-8EE7-4B79-9B03-5B05CE3FCFB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C425B776-A41E-4B0C-AA63-30B64880205D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "CE63C747-7D82-4888-853A-13F5BC6EFFFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "31B41E13-1595-4259-9FB9-294796B82909",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "28080BE5-408C-4A1F-A7C2-3088AF52DA79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5FCC13A2-DC3A-4EE2-9009-A2B034CC5205",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A8ACB3B4-9DD1-4FB3-B861-46C5D4338EB3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "641D178B-8C9A-4373-8789-FE161DF8739A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "AFB1AD40-1B4C-407F-A1B6-99EDF5CD5856",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0CAE8C11-F27B-495F-A6A7-775BD020A238",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "59977D01-EE5D-4581-849D-C9C14049FFD8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "E49A4D27-FA03-4C4C-B382-617F6FF3E9A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "46E1AF65-4336-4286-AC98-8B9A7ACAF1D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FD49880C-A06E-43DD-9FBE-34F6E53AA05A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A8D09028-B17E-4702-996D-D20F9A159873",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "46E7C7B9-E3A9-4C8C-B25C-D27017CA0921",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "325F91DB-B2EC-4646-A8E8-564B1190E043",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "7970E2B7-9D5B-423C-8AD8-8051C1D0873E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "E6C316E6-995D-4EE9-9E89-C6A99D0999FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "292E3DA4-87C6-4FAC-996B-B01BCCC2C149",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "794FC736-3712-438C-B208-32C52023CF76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "C644985A-337F-4A2C-8895-CF0CC868A3FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8851_key_expansion_module_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "EBA00562-A4EC-4B41-84D4-827AAE38B8C4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8851_key_expansion_module:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7AB0894B-04B2-4E6D-940F-2CCDABE962C9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "68C3B91E-6440-4F33-8CF4-0A903EC08566",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "6B1CAC22-A0CE-4B13-82B6-E12C0A318D1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "080645B2-DBA1-4F6F-B72E-A5383EBE9842",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "CDB3DBE4-FB2D-4AF2-9964-5BA11ACAE094",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3363A0F6-D438-42E4-BB59-DE04D5A23C8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "9B96B5E6-787C-4AC1-8490-D6B6591A0BEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A8B0C04C-AE09-4EDB-9D19-7F316261E07E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "ABC5AA9F-7156-4EF5-AFA3-84F9AEE740E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "37D3428D-F68D-4346-9FE5-3042956067A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "EF666268-4180-484A-86D2-44DF7F4F8273",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3DC98996-05DC-479E-ABA8-5F076CF62678",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "C96268A7-3251-4455-A95B-07DF5D6D38DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8E2A9953-BE93-4D3C-9EEC-0547D7F8A390",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "72E33F84-55FE-4462-949A-888F0A28A06E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "51E0CC4F-7291-4F85-A2FF-E0CCC24CF3EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "F7C77029-0751-4D8D-B32E-57AE37D018DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "6D40D4BB-A6BC-428B-BB9E-BBD9D1560F9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1AB93FA3-06C6-4284-BFAF-F0095D67BACF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "D6A4D891-6A4C-4B07-86B2-0995038477D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "C128AB7D-D91C-4C9C-9992-A43C131F41D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "2AC595D4-B946-48BC-98C5-38715A5E4719",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3394B29C-1845-41D3-A9AB-46599A2D087D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8DA5D7B9-86AE-42F9-904C-91C7EDFA2792",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "53D54ACA-AB7A-476B-B8BC-3B8B20D80DA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "390D943A-C4C7-4412-9714-3EEF97A1EB7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "9A1A9E67-A782-412D-9479-043F4997D7A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "1B8E10B2-C291-4D38-863A-5E6F16C19128",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "DDC7EEFE-4A03-4510-845E-3ED2369B0C7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "7AED7945-34E0-406D-8DB1-90E0EEFC32FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "BC8F6449-440E-46DE-9D16-70AE472E5A5A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_key_expansion_module_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "3E555AFA-9E35-410F-ABEC-651A21F0B044",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8861_key_expansion_module:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AF034C01-310E-4B64-B8DC-B6054B0D26DB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "24B726C0-D2D9-45FF-8EA9-1F1293BF9302",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "EA860D6B-D4B1-43E5-8ADC-F39001E49DDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5C8D8C98-B8CE-421D-96EA-A6F98D3B22AF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "33AF04F5-439D-4021-8DE6-0BC1ECCB9D29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "70EB545F-5773-4782-A16D-0EB78E63BDAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "CE2F7BB8-128C-4DB5-98FD-D2C38FFECF4A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D7AB8752-7651-4882-8AFD-464DE6BCA85C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "C6325756-0929-48EB-867B-365E9E261A87",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3F371DF3-3786-40A6-A270-3B8CACE55D8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4939E8F9-D100-44BA-93E4-3D2110B0C45B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0940A9D7-1ACA-4B7E-9934-2E034464A971",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "3DA1B884-2093-4A45-BC6A-60D35136FDAA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "615928B2-F08D-43DA-8F98-0EB9717E86FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "41D85B75-3956-4DB6-84AB-3EC94D9B8319",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "ED1C83C6-9AD9-4DBA-B9D3-8A6866AB147F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "DD8CDF57-621D-4CE0-AE81-CA69648A448E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "ACD0F966-FF5B-4922-ABE9-70E04B293D51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "19B36C31-FF01-41AE-A287-58743F0EC1B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "34B22E1A-D8CA-4050-8E88-060BB6DEA096",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "EE476131-EA5F-451F-B499-CBDBDDBA9509",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "ABB71861-BF39-4253-9376-8AA8DA531471",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "22B483D7-F410-4AAD-BA82-1556BDE3709A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "5038C3F1-AF13-447A-B609-85258A01FFBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "8A1D0189-6E94-4DB7-8372-39A132136A17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "B5D413B0-A268-4FEC-998A-A0A36F632CBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "D9F9317E-DFB8-4C8C-A885-23C655F088A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "46F5F10C-F765-463F-896D-A8453F92FD83",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "C47A3B86-E1AA-453C-9651-188070EDFCD7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "0E852D82-72A8-4785-B048-A14ACEE99ED7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "3C5B9999-9921-4FB2-8DCE-6835CAFFC1CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "FB4F9FB3-6A31-4DF2-B582-B4C115767CDF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
"matchCriteriaId": "090EE553-01D5-45F0-87A4-E1167F46EB77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:*",
"matchCriteriaId": "01ED00F8-0BED-4EEB-846F-51422E085F81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:*",
"matchCriteriaId": "D029FECC-148F-4E90-9F7D-DB7A589AD5A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D9D7D6BD-9E28-49D4-836D-1A5CAC1F78E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D9BA1F35-7AF6-46B1-98A1-AE2AD5237707",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "641AF1DA-4942-403D-B4A2-9AF87C176466",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C6D6A64B-C659-47BE-8B66-5BCADB33D45D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BAF5125D-0A04-4EB7-A7AA-1F566D286F17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "842EB3DC-A278-442F-A3A9-45F815AE1D98",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.1.1_msr2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "AF2D1336-2EF7-4280-A594-EF4647C8DD1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "8DAB9B94-5D57-46F8-A522-7CABB0147883",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.1.2_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "443D04F5-370D-4812-91CD-ECDEA64AA526",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.1.2_msr3-1:*:*:*:*:*:*:*",
"matchCriteriaId": "1FD6B837-5BA1-49E0-BE6B-DC344E05CE52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "57D33673-18B6-4D99-970A-BC72DB1E5909",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "065D7046-E8EE-43F6-9942-18BC65A088E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "86B059BF-F869-4C3D-848A-1CE9B96A3A91",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.2.3_msr1-1:*:*:*:*:*:*:*",
"matchCriteriaId": "078CD00D-7CFB-4F2A-96B2-DB111971A0CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "DF27471D-9C51-40AA-A037-30808A94A400",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "32E65419-104F-467D-88CA-8800BAC94187",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.1_msr1-3:*:*:*:*:*:*:*",
"matchCriteriaId": "F68E0B54-0508-4816-88C8-07F54526CCE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.1_msr2-6:*:*:*:*:*:*:*",
"matchCriteriaId": "0871D409-AF8C-40D1-8AEA-A7892791895D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.1_msr3-3:*:*:*:*:*:*:*",
"matchCriteriaId": "B1FA15F7-AE16-4902-BE48-BD1C84DBD82F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "87CCB121-43BD-4A08-8C63-D7F662F6F983",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "19A339A7-4144-4C62-AEF5-7431FA61172B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.3_msr1:*:*:*:*:*:*:*",
"matchCriteriaId": "D4BEC729-829D-4417-98FB-9260D77F3236",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "DE164423-2BBB-46E8-A491-A265302178A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "8F932654-D828-478F-8CD2-7789A478C906",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "7F4AC678-AB74-4EAF-830E-79ABD38E5930",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.6sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "F7DB1393-A655-4B92-BE70-9824E92E66A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "7F97F322-FE43-45C6-A2BC-33BC0ACFDD52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.7sr1:*:*:*:*:*:*:*",
"matchCriteriaId": "CA89E75D-674E-449B-AEE5-54CE5B6B4DCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:11.3.7sr2:*:*:*:*:*:*:*",
"matchCriteriaId": "7B61A939-4E74-496A-8D33-AE42B4602203",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system.\r\n\r This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition."
}
],
"id": "CVE-2023-20221",
"lastModified": "2024-11-21T07:40:55.780",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "psirt@cisco.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2023-08-16T22:15:11.687",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-csrf-HOCmXW2c"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-csrf-HOCmXW2c"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-352"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-352"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2021-1379 (GCVE-0-2021-1379)
Vulnerability from cvelistv5 – Published: 2024-11-18 15:42 – Updated: 2024-11-18 16:23
VLAI?
Title
Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities
Summary
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.
These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Severity ?
CWE
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.1.2
Affected: 11.2.1 Affected: 11.2.3 Affected: 11.2.2 Affected: 11.2.3 MSR1-1 Affected: 11.1.2 MSR1-1 Affected: 11.1.1 Affected: 11.1.2 MSR3-1 Affected: 11.0.0 Affected: 11.1.1 MSR1-1 Affected: 11.0.1 Affected: 11.1.1 MSR2-1 Affected: 11.2.4 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 11.3.2 Affected: 11.3.1 MSR2-6 Affected: 11.3.1 MSR3-3 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2021-1379",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-18T16:22:56.651830Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-18T16:23:13.534Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Session Initiation Protocol (SIP) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.0(3)"
},
{
"status": "affected",
"version": "9.0(2)SR2"
},
{
"status": "affected",
"version": "9.0(2)SR1"
},
{
"status": "affected",
"version": "9.2(1)"
},
{
"status": "affected",
"version": "9.4(2)SR1"
},
{
"status": "affected",
"version": "9.4(2)"
},
{
"status": "affected",
"version": "9.4(2)SR2"
},
{
"status": "affected",
"version": "9.4(2)SR3"
},
{
"status": "affected",
"version": "9.3(1)SR2"
},
{
"status": "affected",
"version": "9.3(1)SR3"
},
{
"status": "affected",
"version": "9.3(1)SR1"
},
{
"status": "affected",
"version": "9.1(1)SR1"
},
{
"status": "affected",
"version": "9.3(1)SR4"
},
{
"status": "affected",
"version": "9.2(3)"
},
{
"status": "affected",
"version": "9.2(1)SR2"
},
{
"status": "affected",
"version": "9.3(1)"
},
{
"status": "affected",
"version": "9.4(2)SR4"
},
{
"status": "affected",
"version": "12.1(1)SR1"
},
{
"status": "affected",
"version": "11.5(1)"
},
{
"status": "affected",
"version": "10.3(2)"
},
{
"status": "affected",
"version": "10.2(2)"
},
{
"status": "affected",
"version": "10.3(1)"
},
{
"status": "affected",
"version": "10.3(1)SR4"
},
{
"status": "affected",
"version": "11.0(1)"
},
{
"status": "affected",
"version": "10.4(1)SR2 3rd Party"
},
{
"status": "affected",
"version": "11.7(1)"
},
{
"status": "affected",
"version": "12.1(1)"
},
{
"status": "affected",
"version": "11.0(0.7) MPP"
},
{
"status": "affected",
"version": "9.3(4) 3rd Party"
},
{
"status": "affected",
"version": "12.5(1)SR2"
},
{
"status": "affected",
"version": "10.2(1)SR1"
},
{
"status": "affected",
"version": "9.3(4)SR3 3rd Party"
},
{
"status": "affected",
"version": "10.2(1)"
},
{
"status": "affected",
"version": "12.5(1)"
},
{
"status": "affected",
"version": "10.3(1)SR2"
},
{
"status": "affected",
"version": "11-0-1MSR1-1"
},
{
"status": "affected",
"version": "10.4(1) 3rd Party"
},
{
"status": "affected",
"version": "12.5(1)SR1"
},
{
"status": "affected",
"version": "11.5(1)SR1"
},
{
"status": "affected",
"version": "10.1(1)SR2"
},
{
"status": "affected",
"version": "12.0(1)SR2"
},
{
"status": "affected",
"version": "12.6(1)"
},
{
"status": "affected",
"version": "10.3(1.11) 3rd Party"
},
{
"status": "affected",
"version": "12.0(1)"
},
{
"status": "affected",
"version": "12.0(1)SR1"
},
{
"status": "affected",
"version": "9.3(3)"
},
{
"status": "affected",
"version": "12.5(1)SR3"
},
{
"status": "affected",
"version": "10.3(1)SR4b"
},
{
"status": "affected",
"version": "9.3(4)SR1 3rd Party"
},
{
"status": "affected",
"version": "10.3(1)SR5"
},
{
"status": "affected",
"version": "10.1(1.9)"
},
{
"status": "affected",
"version": "10.3(1.9) 3rd Party"
},
{
"status": "affected",
"version": "9.3(4)SR2 3rd Party"
},
{
"status": "affected",
"version": "10.3(1)SR1"
},
{
"status": "affected",
"version": "10.3(1)SR3"
},
{
"status": "affected",
"version": "10.1(1)SR1"
},
{
"status": "affected",
"version": "12.0(1)SR3"
},
{
"status": "affected",
"version": "12.6(1)SR1"
},
{
"status": "affected",
"version": "12.7(1)"
},
{
"status": "affected",
"version": "10.3(1)SR6"
},
{
"status": "affected",
"version": "12.8(1)"
},
{
"status": "affected",
"version": "12.7(1)SR1"
},
{
"status": "affected",
"version": "11.0(2)SR1"
},
{
"status": "affected",
"version": "11.0(4)"
},
{
"status": "affected",
"version": "11.0(2)"
},
{
"status": "affected",
"version": "11.0(4)SR3"
},
{
"status": "affected",
"version": "11.0(5)"
},
{
"status": "affected",
"version": "11.0(3)SR2"
},
{
"status": "affected",
"version": "11.0(3)SR4"
},
{
"status": "affected",
"version": "11.0(3)SR3"
},
{
"status": "affected",
"version": "11.0(2)SR2"
},
{
"status": "affected",
"version": "11.0(4)SR1"
},
{
"status": "affected",
"version": "11.0(5)SR3"
},
{
"status": "affected",
"version": "11.0(3)"
},
{
"status": "affected",
"version": "11.0(5)SR2"
},
{
"status": "affected",
"version": "11.0(3)SR6"
},
{
"status": "affected",
"version": "11.0(5)SR1"
},
{
"status": "affected",
"version": "11.0(4)SR2"
},
{
"status": "affected",
"version": "11.0(3)SR1"
},
{
"status": "affected",
"version": "11.0(3)SR5"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Small Business IP Phones",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.4.8"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.5.5a"
},
{
"status": "affected",
"version": "7.3.7"
},
{
"status": "affected",
"version": "7.5.2"
},
{
"status": "affected",
"version": "7.5.1"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "7.5.7"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.6.2SR3"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.5.6"
},
{
"status": "affected",
"version": "7.5.6c"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.7"
},
{
"status": "affected",
"version": "7.6.2SR6"
},
{
"status": "affected",
"version": "7.5.2b"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "7.5.6a"
},
{
"status": "affected",
"version": "7.6.2SR2"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.5.2a"
},
{
"status": "affected",
"version": "7.5.6(XU)"
},
{
"status": "affected",
"version": "7.5.7s"
},
{
"status": "affected",
"version": "7.6.2SR4"
},
{
"status": "affected",
"version": "7.6.2SR1"
},
{
"status": "affected",
"version": "7.4.9"
},
{
"status": "affected",
"version": "7.5.5b"
},
{
"status": "affected",
"version": "7.6.2SR5"
},
{
"status": "affected",
"version": "7.5.4"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.6.2SR7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple vulnerabilities in the Cisco\u0026nbsp;Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco\u0026nbsp;IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.\r\nThese vulnerabilities are due to missing checks when the IP phone processes a Cisco\u0026nbsp;Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco\u0026nbsp;Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco\u0026nbsp;Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco\u0026nbsp;has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco\u00a0Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:X/RC:X/E:X",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-18T15:42:00.388Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-rce-dos-U2PsSkz3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-rce-dos-U2PsSkz3"
},
{
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3"
}
],
"source": {
"advisory": "cisco-sa-ipphone-rce-dos-U2PsSkz3",
"defects": [
"CSCvu59351"
],
"discovery": "EXTERNAL"
},
"title": "Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2021-1379",
"datePublished": "2024-11-18T15:42:00.388Z",
"dateReserved": "2020-11-13T00:00:00.000Z",
"dateUpdated": "2024-11-18T16:23:13.534Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20534 (GCVE-0-2024-20534)
Vulnerability from cvelistv5 – Published: 2024-11-06 16:31 – Updated: 2024-11-06 17:00
VLAI?
Title
Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability
Summary
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.
This vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Note: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default.
Severity ?
4.8 (Medium)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.1.2
Affected: 11.2.1 Affected: 11.2.3 Affected: 11.2.2 Affected: 11.2.3 MSR1-1 Affected: 11.1.2 MSR1-1 Affected: 11.1.1 Affected: 11.1.2 MSR3-1 Affected: 11.0.0 Affected: 11.1.1 MSR1-1 Affected: 11.0.1 Affected: 11.1.1 MSR2-1 Affected: 11.2.4 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 11.3.2 Affected: 11.3.1 MSR2-6 Affected: 11-3-1MSR2UPG Affected: 4.7.1 Affected: 4.6 MSR1 Affected: 11.3.1 MSR3-3 Affected: 4.8.1 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 4.8.1 SR1 Affected: 11.3.5 Affected: 11.3.3 MSR1 Affected: 5.0.1 Affected: 11.3.3 MSR2 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.6SR1 Affected: 11.3.7 Affected: 5.1.1 Affected: 11.3.7SR1 Affected: 12.0.1 Affected: 12.0.2 Affected: 11.3.7SR2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 12.0.4SR1 Affected: 12.0.5 Affected: 12.0.5SR1 Affected: 12.0.3SR2 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20534",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-06T16:59:56.911012Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-06T17:00:08.112Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "4.7.1"
},
{
"status": "affected",
"version": "4.6 MSR1"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "4.8.1"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "4.8.1 SR1"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "12.0.4SR1"
},
{
"status": "affected",
"version": "12.0.5"
},
{
"status": "affected",
"version": "12.0.5SR1"
},
{
"status": "affected",
"version": "12.0.3SR2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Session Initiation Protocol (SIP) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.1(1)"
},
{
"status": "affected",
"version": "3.0(1)"
},
{
"status": "affected",
"version": "3.1(1)SR1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.\r\n\r\nThis vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-06T16:55:30.873Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-mpp-xss-8tAV2TvF",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF"
}
],
"source": {
"advisory": "cisco-sa-mpp-xss-8tAV2TvF",
"defects": [
"CSCwm39676"
],
"discovery": "INTERNAL"
},
"title": "Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20534",
"datePublished": "2024-11-06T16:31:30.293Z",
"dateReserved": "2023-11-08T15:08:07.692Z",
"dateUpdated": "2024-11-06T17:00:08.112Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20533 (GCVE-0-2024-20533)
Vulnerability from cvelistv5 – Published: 2024-11-06 16:31 – Updated: 2024-11-06 17:00
VLAI?
Title
Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities
Summary
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.
This vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Note: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default.
Severity ?
4.8 (Medium)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.1.2
Affected: 11.2.1 Affected: 11.2.3 Affected: 11.2.2 Affected: 11.2.3 MSR1-1 Affected: 11.1.2 MSR1-1 Affected: 11.1.1 Affected: 11.1.2 MSR3-1 Affected: 11.0.0 Affected: 11.1.1 MSR1-1 Affected: 11.0.1 Affected: 11.1.1 MSR2-1 Affected: 11.2.4 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 11.3.2 Affected: 11.3.1 MSR2-6 Affected: 11-3-1MSR2UPG Affected: 11.3.1 MSR3-3 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR1 Affected: 11.3.3 MSR2 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.6SR1 Affected: 11.3.7 Affected: 11.3.7SR1 Affected: 12.0.1 Affected: 12.0.2 Affected: 11.3.7SR2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 12.0.4SR1 Affected: 12.0.5 Affected: 12.0.5SR1 Affected: 12.0.3SR2 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20533",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-06T17:00:30.709215Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-06T17:00:38.504Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "12.0.4SR1"
},
{
"status": "affected",
"version": "12.0.5"
},
{
"status": "affected",
"version": "12.0.5SR1"
},
{
"status": "affected",
"version": "12.0.3SR2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Session Initiation Protocol (SIP) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.1(1)"
},
{
"status": "affected",
"version": "3.0(1)"
},
{
"status": "affected",
"version": "3.1(1)SR1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.\r\n\r\nThis vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-06T16:55:22.819Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-mpp-xss-8tAV2TvF",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF"
}
],
"source": {
"advisory": "cisco-sa-mpp-xss-8tAV2TvF",
"defects": [
"CSCwm38104"
],
"discovery": "INTERNAL"
},
"title": "Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20533",
"datePublished": "2024-11-06T16:31:21.072Z",
"dateReserved": "2023-11-08T15:08:07.692Z",
"dateUpdated": "2024-11-06T17:00:38.504Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20376 (GCVE-0-2024-20376)
Vulnerability from cvelistv5 – Published: 2024-05-01 16:43 – Updated: 2024-08-01 21:59
VLAI?
Summary
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Severity ?
7.5 (High)
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.3.1 MSR2-6
Affected: 11.3.1 MSR3-3 Affected: 11.3.2 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR2 Affected: 11.3.3 MSR1 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.7 Affected: 11-3-1MSR2UPG Affected: 11.3.6SR1 Affected: 11.3.7SR1 Affected: 11.3.7SR2 Affected: 11.0.0 Affected: 11.0.1 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.1.1 Affected: 11.1.1 MSR1-1 Affected: 11.1.1 MSR2-1 Affected: 11.1.2 Affected: 11.1.2 MSR1-1 Affected: 11.1.2 MSR3-1 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.3 Affected: 11.2.3 MSR1-1 Affected: 11.2.4 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 4.5 Affected: 4.6 MSR1 Affected: 4.7.1 Affected: 4.8.1 Affected: 4.8.1 SR1 Affected: 5.0.1 Affected: 12.0.1 Affected: 12.0.2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 5.1.1 Affected: 5.1.2 Affected: 5.1(2)SR1 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6871_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6851_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6825_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6825_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7811_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:cisco:ip_phone_8800_series_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_8800_series_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "video_phone_8875_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20376",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-01T20:50:33.825806Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-06T13:47:10.312Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T21:59:42.187Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "4.5"
},
{
"status": "affected",
"version": "4.6 MSR1"
},
{
"status": "affected",
"version": "4.7.1"
},
{
"status": "affected",
"version": "4.8.1"
},
{
"status": "affected",
"version": "4.8.1 SR1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1(2)SR1"
}
]
},
{
"product": "Cisco PhoneOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.0.1"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.3.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. \r\n\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-01T16:43:15.553Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"source": {
"advisory": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"defects": [
"CSCwi64103",
"CSCwi64077"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20376",
"datePublished": "2024-05-01T16:43:15.553Z",
"dateReserved": "2023-11-08T15:08:07.655Z",
"dateUpdated": "2024-08-01T21:59:42.187Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20378 (GCVE-0-2024-20378)
Vulnerability from cvelistv5 – Published: 2024-05-01 16:41 – Updated: 2024-08-01 21:59
VLAI?
Summary
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.
This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed.
Severity ?
7.5 (High)
CWE
- CWE-305 - Authentication Bypass by Primary Weakness
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.3.1 MSR2-6
Affected: 11.3.1 MSR3-3 Affected: 11.3.2 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR2 Affected: 11.3.3 MSR1 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.7 Affected: 11-3-1MSR2UPG Affected: 11.3.6SR1 Affected: 11.3.7SR1 Affected: 11.3.7SR2 Affected: 11.0.0 Affected: 11.0.1 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.1.1 Affected: 11.1.1 MSR1-1 Affected: 11.1.1 MSR2-1 Affected: 11.1.2 Affected: 11.1.2 MSR1-1 Affected: 11.1.2 MSR3-1 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.3 Affected: 11.2.3 MSR1-1 Affected: 11.2.4 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 4.5 Affected: 4.6 MSR1 Affected: 4.7.1 Affected: 4.8.1 Affected: 4.8.1 SR1 Affected: 5.0.1 Affected: 12.0.1 Affected: 12.0.2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 5.1.1 Affected: 5.1.2 Affected: 5.1(2)SR1 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6871_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6851_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6825_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6825_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7811_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:cisco:ip_phone_8800_series_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_8800_series_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "video_phone_8875_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20378",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-01T20:19:03.667220Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-06T13:47:37.828Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T21:59:42.451Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "4.5"
},
{
"status": "affected",
"version": "4.6 MSR1"
},
{
"status": "affected",
"version": "4.7.1"
},
{
"status": "affected",
"version": "4.8.1"
},
{
"status": "affected",
"version": "4.8.1 SR1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1(2)SR1"
}
]
},
{
"product": "Cisco PhoneOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.0.1"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.3.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. \r\n\r This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-305",
"description": "Authentication Bypass by Primary Weakness",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-01T16:41:52.385Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"source": {
"advisory": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"defects": [
"CSCwi64037",
"CSCwi64050"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20378",
"datePublished": "2024-05-01T16:41:52.385Z",
"dateReserved": "2023-11-08T15:08:07.655Z",
"dateUpdated": "2024-08-01T21:59:42.451Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20357 (GCVE-0-2024-20357)
Vulnerability from cvelistv5 – Published: 2024-05-01 16:36 – Updated: 2024-08-01 21:59
VLAI?
Summary
A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device.
This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.
Severity ?
5.9 (Medium)
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.3.1 MSR2-6
Affected: 11.3.1 MSR3-3 Affected: 11.3.2 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR2 Affected: 11.3.3 MSR1 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.7 Affected: 11-3-1MSR2UPG Affected: 11.3.6SR1 Affected: 11.3.7SR1 Affected: 11.3.7SR2 Affected: 11.0.0 Affected: 11.0.1 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.1.1 Affected: 11.1.1 MSR1-1 Affected: 11.1.1 MSR2-1 Affected: 11.1.2 Affected: 11.1.2 MSR1-1 Affected: 11.1.2 MSR3-1 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.3 Affected: 11.2.3 MSR1-1 Affected: 11.2.4 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 4.5 Affected: 4.6 MSR1 Affected: 4.7.1 Affected: 4.8.1 Affected: 4.8.1 SR1 Affected: 5.0.1 Affected: 12.0.1 Affected: 12.0.2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 5.1.1 Affected: 5.1.2 Affected: 5.1(2)SR1 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6871_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6851_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6825_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6825_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7811_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:cisco:ip_phone_8800_series_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_8800_series_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "video_phone_8875_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20357",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-01T20:55:26.843678Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-06T13:45:13.942Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T21:59:42.103Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "4.5"
},
{
"status": "affected",
"version": "4.6 MSR1"
},
{
"status": "affected",
"version": "4.7.1"
},
{
"status": "affected",
"version": "4.8.1"
},
{
"status": "affected",
"version": "4.8.1 SR1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1(2)SR1"
}
]
},
{
"product": "Cisco PhoneOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.0.1"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.3.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. \r\n\r This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-01T16:36:53.907Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"source": {
"advisory": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"defects": [
"CSCwi64082",
"CSCwi64064"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20357",
"datePublished": "2024-05-01T16:36:53.907Z",
"dateReserved": "2023-11-08T15:08:07.649Z",
"dateUpdated": "2024-08-01T21:59:42.103Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-20221 (GCVE-0-2023-20221)
Vulnerability from cvelistv5 – Published: 2023-08-16 21:01 – Updated: 2024-08-02 09:05
VLAI?
Summary
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system.
This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition.
Severity ?
6.5 (Medium)
CWE
- CWE-352 - Cross-Site Request Forgery (CSRF)
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.3.1 MSR2-6
Affected: 11.3.1 MSR3-3 Affected: 11.3.2 Affected: 11.3.3 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR1 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.7 Affected: 11-3-1MSR2UPG Affected: 11.3.6SR1 Affected: 11.3.7SR1 Affected: 11.3.7SR2 Affected: 11.0.0 Affected: 11.0.1 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.1.1 Affected: 11.1.1 MSR1-1 Affected: 11.1.1 MSR2-1 Affected: 11.1.2 Affected: 11.1.2 MSR1-1 Affected: 11.1.2 MSR3-1 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.3 Affected: 11.2.3 MSR1-1 Affected: 11.2.4 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:05:35.927Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-ipphone-csrf-HOCmXW2c",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-csrf-HOCmXW2c"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
}
]
},
{
"product": "Cisco PhoneOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.0.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system.\r\n\r This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-01-25T16:58:23.679Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-csrf-HOCmXW2c",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-csrf-HOCmXW2c"
}
],
"source": {
"advisory": "cisco-sa-ipphone-csrf-HOCmXW2c",
"defects": [
"CSCwc78409",
"CSCwc81103",
"CSCwc78412"
],
"discovery": "INTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2023-20221",
"datePublished": "2023-08-16T21:01:05.872Z",
"dateReserved": "2022-10-27T18:47:50.368Z",
"dateUpdated": "2024-08-02T09:05:35.927Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-1379 (GCVE-0-2021-1379)
Vulnerability from nvd – Published: 2024-11-18 15:42 – Updated: 2024-11-18 16:23
VLAI?
Title
Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities
Summary
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.
These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Severity ?
CWE
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.1.2
Affected: 11.2.1 Affected: 11.2.3 Affected: 11.2.2 Affected: 11.2.3 MSR1-1 Affected: 11.1.2 MSR1-1 Affected: 11.1.1 Affected: 11.1.2 MSR3-1 Affected: 11.0.0 Affected: 11.1.1 MSR1-1 Affected: 11.0.1 Affected: 11.1.1 MSR2-1 Affected: 11.2.4 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 11.3.2 Affected: 11.3.1 MSR2-6 Affected: 11.3.1 MSR3-3 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2021-1379",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-18T16:22:56.651830Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-18T16:23:13.534Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Session Initiation Protocol (SIP) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.0(3)"
},
{
"status": "affected",
"version": "9.0(2)SR2"
},
{
"status": "affected",
"version": "9.0(2)SR1"
},
{
"status": "affected",
"version": "9.2(1)"
},
{
"status": "affected",
"version": "9.4(2)SR1"
},
{
"status": "affected",
"version": "9.4(2)"
},
{
"status": "affected",
"version": "9.4(2)SR2"
},
{
"status": "affected",
"version": "9.4(2)SR3"
},
{
"status": "affected",
"version": "9.3(1)SR2"
},
{
"status": "affected",
"version": "9.3(1)SR3"
},
{
"status": "affected",
"version": "9.3(1)SR1"
},
{
"status": "affected",
"version": "9.1(1)SR1"
},
{
"status": "affected",
"version": "9.3(1)SR4"
},
{
"status": "affected",
"version": "9.2(3)"
},
{
"status": "affected",
"version": "9.2(1)SR2"
},
{
"status": "affected",
"version": "9.3(1)"
},
{
"status": "affected",
"version": "9.4(2)SR4"
},
{
"status": "affected",
"version": "12.1(1)SR1"
},
{
"status": "affected",
"version": "11.5(1)"
},
{
"status": "affected",
"version": "10.3(2)"
},
{
"status": "affected",
"version": "10.2(2)"
},
{
"status": "affected",
"version": "10.3(1)"
},
{
"status": "affected",
"version": "10.3(1)SR4"
},
{
"status": "affected",
"version": "11.0(1)"
},
{
"status": "affected",
"version": "10.4(1)SR2 3rd Party"
},
{
"status": "affected",
"version": "11.7(1)"
},
{
"status": "affected",
"version": "12.1(1)"
},
{
"status": "affected",
"version": "11.0(0.7) MPP"
},
{
"status": "affected",
"version": "9.3(4) 3rd Party"
},
{
"status": "affected",
"version": "12.5(1)SR2"
},
{
"status": "affected",
"version": "10.2(1)SR1"
},
{
"status": "affected",
"version": "9.3(4)SR3 3rd Party"
},
{
"status": "affected",
"version": "10.2(1)"
},
{
"status": "affected",
"version": "12.5(1)"
},
{
"status": "affected",
"version": "10.3(1)SR2"
},
{
"status": "affected",
"version": "11-0-1MSR1-1"
},
{
"status": "affected",
"version": "10.4(1) 3rd Party"
},
{
"status": "affected",
"version": "12.5(1)SR1"
},
{
"status": "affected",
"version": "11.5(1)SR1"
},
{
"status": "affected",
"version": "10.1(1)SR2"
},
{
"status": "affected",
"version": "12.0(1)SR2"
},
{
"status": "affected",
"version": "12.6(1)"
},
{
"status": "affected",
"version": "10.3(1.11) 3rd Party"
},
{
"status": "affected",
"version": "12.0(1)"
},
{
"status": "affected",
"version": "12.0(1)SR1"
},
{
"status": "affected",
"version": "9.3(3)"
},
{
"status": "affected",
"version": "12.5(1)SR3"
},
{
"status": "affected",
"version": "10.3(1)SR4b"
},
{
"status": "affected",
"version": "9.3(4)SR1 3rd Party"
},
{
"status": "affected",
"version": "10.3(1)SR5"
},
{
"status": "affected",
"version": "10.1(1.9)"
},
{
"status": "affected",
"version": "10.3(1.9) 3rd Party"
},
{
"status": "affected",
"version": "9.3(4)SR2 3rd Party"
},
{
"status": "affected",
"version": "10.3(1)SR1"
},
{
"status": "affected",
"version": "10.3(1)SR3"
},
{
"status": "affected",
"version": "10.1(1)SR1"
},
{
"status": "affected",
"version": "12.0(1)SR3"
},
{
"status": "affected",
"version": "12.6(1)SR1"
},
{
"status": "affected",
"version": "12.7(1)"
},
{
"status": "affected",
"version": "10.3(1)SR6"
},
{
"status": "affected",
"version": "12.8(1)"
},
{
"status": "affected",
"version": "12.7(1)SR1"
},
{
"status": "affected",
"version": "11.0(2)SR1"
},
{
"status": "affected",
"version": "11.0(4)"
},
{
"status": "affected",
"version": "11.0(2)"
},
{
"status": "affected",
"version": "11.0(4)SR3"
},
{
"status": "affected",
"version": "11.0(5)"
},
{
"status": "affected",
"version": "11.0(3)SR2"
},
{
"status": "affected",
"version": "11.0(3)SR4"
},
{
"status": "affected",
"version": "11.0(3)SR3"
},
{
"status": "affected",
"version": "11.0(2)SR2"
},
{
"status": "affected",
"version": "11.0(4)SR1"
},
{
"status": "affected",
"version": "11.0(5)SR3"
},
{
"status": "affected",
"version": "11.0(3)"
},
{
"status": "affected",
"version": "11.0(5)SR2"
},
{
"status": "affected",
"version": "11.0(3)SR6"
},
{
"status": "affected",
"version": "11.0(5)SR1"
},
{
"status": "affected",
"version": "11.0(4)SR2"
},
{
"status": "affected",
"version": "11.0(3)SR1"
},
{
"status": "affected",
"version": "11.0(3)SR5"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Small Business IP Phones",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.4.8"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.5.5a"
},
{
"status": "affected",
"version": "7.3.7"
},
{
"status": "affected",
"version": "7.5.2"
},
{
"status": "affected",
"version": "7.5.1"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "7.5.7"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.6.2SR3"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.5.6"
},
{
"status": "affected",
"version": "7.5.6c"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.7"
},
{
"status": "affected",
"version": "7.6.2SR6"
},
{
"status": "affected",
"version": "7.5.2b"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "7.5.6a"
},
{
"status": "affected",
"version": "7.6.2SR2"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.5.2a"
},
{
"status": "affected",
"version": "7.5.6(XU)"
},
{
"status": "affected",
"version": "7.5.7s"
},
{
"status": "affected",
"version": "7.6.2SR4"
},
{
"status": "affected",
"version": "7.6.2SR1"
},
{
"status": "affected",
"version": "7.4.9"
},
{
"status": "affected",
"version": "7.5.5b"
},
{
"status": "affected",
"version": "7.6.2SR5"
},
{
"status": "affected",
"version": "7.5.4"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.6.2SR7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple vulnerabilities in the Cisco\u0026nbsp;Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco\u0026nbsp;IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.\r\nThese vulnerabilities are due to missing checks when the IP phone processes a Cisco\u0026nbsp;Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco\u0026nbsp;Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco\u0026nbsp;Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco\u0026nbsp;has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco\u00a0Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:X/RC:X/E:X",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-18T15:42:00.388Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-rce-dos-U2PsSkz3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-rce-dos-U2PsSkz3"
},
{
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3"
}
],
"source": {
"advisory": "cisco-sa-ipphone-rce-dos-U2PsSkz3",
"defects": [
"CSCvu59351"
],
"discovery": "EXTERNAL"
},
"title": "Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2021-1379",
"datePublished": "2024-11-18T15:42:00.388Z",
"dateReserved": "2020-11-13T00:00:00.000Z",
"dateUpdated": "2024-11-18T16:23:13.534Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20534 (GCVE-0-2024-20534)
Vulnerability from nvd – Published: 2024-11-06 16:31 – Updated: 2024-11-06 17:00
VLAI?
Title
Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability
Summary
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.
This vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Note: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default.
Severity ?
4.8 (Medium)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.1.2
Affected: 11.2.1 Affected: 11.2.3 Affected: 11.2.2 Affected: 11.2.3 MSR1-1 Affected: 11.1.2 MSR1-1 Affected: 11.1.1 Affected: 11.1.2 MSR3-1 Affected: 11.0.0 Affected: 11.1.1 MSR1-1 Affected: 11.0.1 Affected: 11.1.1 MSR2-1 Affected: 11.2.4 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 11.3.2 Affected: 11.3.1 MSR2-6 Affected: 11-3-1MSR2UPG Affected: 4.7.1 Affected: 4.6 MSR1 Affected: 11.3.1 MSR3-3 Affected: 4.8.1 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 4.8.1 SR1 Affected: 11.3.5 Affected: 11.3.3 MSR1 Affected: 5.0.1 Affected: 11.3.3 MSR2 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.6SR1 Affected: 11.3.7 Affected: 5.1.1 Affected: 11.3.7SR1 Affected: 12.0.1 Affected: 12.0.2 Affected: 11.3.7SR2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 12.0.4SR1 Affected: 12.0.5 Affected: 12.0.5SR1 Affected: 12.0.3SR2 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20534",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-06T16:59:56.911012Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-06T17:00:08.112Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "4.7.1"
},
{
"status": "affected",
"version": "4.6 MSR1"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "4.8.1"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "4.8.1 SR1"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "12.0.4SR1"
},
{
"status": "affected",
"version": "12.0.5"
},
{
"status": "affected",
"version": "12.0.5SR1"
},
{
"status": "affected",
"version": "12.0.3SR2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Session Initiation Protocol (SIP) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.1(1)"
},
{
"status": "affected",
"version": "3.0(1)"
},
{
"status": "affected",
"version": "3.1(1)SR1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.\r\n\r\nThis vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-06T16:55:30.873Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-mpp-xss-8tAV2TvF",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF"
}
],
"source": {
"advisory": "cisco-sa-mpp-xss-8tAV2TvF",
"defects": [
"CSCwm39676"
],
"discovery": "INTERNAL"
},
"title": "Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20534",
"datePublished": "2024-11-06T16:31:30.293Z",
"dateReserved": "2023-11-08T15:08:07.692Z",
"dateUpdated": "2024-11-06T17:00:08.112Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20533 (GCVE-0-2024-20533)
Vulnerability from nvd – Published: 2024-11-06 16:31 – Updated: 2024-11-06 17:00
VLAI?
Title
Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities
Summary
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.
This vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Note: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default.
Severity ?
4.8 (Medium)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.1.2
Affected: 11.2.1 Affected: 11.2.3 Affected: 11.2.2 Affected: 11.2.3 MSR1-1 Affected: 11.1.2 MSR1-1 Affected: 11.1.1 Affected: 11.1.2 MSR3-1 Affected: 11.0.0 Affected: 11.1.1 MSR1-1 Affected: 11.0.1 Affected: 11.1.1 MSR2-1 Affected: 11.2.4 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 11.3.2 Affected: 11.3.1 MSR2-6 Affected: 11-3-1MSR2UPG Affected: 11.3.1 MSR3-3 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR1 Affected: 11.3.3 MSR2 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.6SR1 Affected: 11.3.7 Affected: 11.3.7SR1 Affected: 12.0.1 Affected: 12.0.2 Affected: 11.3.7SR2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 12.0.4SR1 Affected: 12.0.5 Affected: 12.0.5SR1 Affected: 12.0.3SR2 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20533",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-06T17:00:30.709215Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-06T17:00:38.504Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "12.0.4SR1"
},
{
"status": "affected",
"version": "12.0.5"
},
{
"status": "affected",
"version": "12.0.5SR1"
},
{
"status": "affected",
"version": "12.0.3SR2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Session Initiation Protocol (SIP) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.1(1)"
},
{
"status": "affected",
"version": "3.0(1)"
},
{
"status": "affected",
"version": "3.1(1)SR1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.\r\n\r\nThis vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-06T16:55:22.819Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-mpp-xss-8tAV2TvF",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF"
}
],
"source": {
"advisory": "cisco-sa-mpp-xss-8tAV2TvF",
"defects": [
"CSCwm38104"
],
"discovery": "INTERNAL"
},
"title": "Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20533",
"datePublished": "2024-11-06T16:31:21.072Z",
"dateReserved": "2023-11-08T15:08:07.692Z",
"dateUpdated": "2024-11-06T17:00:38.504Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20376 (GCVE-0-2024-20376)
Vulnerability from nvd – Published: 2024-05-01 16:43 – Updated: 2024-08-01 21:59
VLAI?
Summary
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Severity ?
7.5 (High)
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.3.1 MSR2-6
Affected: 11.3.1 MSR3-3 Affected: 11.3.2 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR2 Affected: 11.3.3 MSR1 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.7 Affected: 11-3-1MSR2UPG Affected: 11.3.6SR1 Affected: 11.3.7SR1 Affected: 11.3.7SR2 Affected: 11.0.0 Affected: 11.0.1 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.1.1 Affected: 11.1.1 MSR1-1 Affected: 11.1.1 MSR2-1 Affected: 11.1.2 Affected: 11.1.2 MSR1-1 Affected: 11.1.2 MSR3-1 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.3 Affected: 11.2.3 MSR1-1 Affected: 11.2.4 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 4.5 Affected: 4.6 MSR1 Affected: 4.7.1 Affected: 4.8.1 Affected: 4.8.1 SR1 Affected: 5.0.1 Affected: 12.0.1 Affected: 12.0.2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 5.1.1 Affected: 5.1.2 Affected: 5.1(2)SR1 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6871_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6851_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6825_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6825_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7811_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:cisco:ip_phone_8800_series_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_8800_series_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "video_phone_8875_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20376",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-01T20:50:33.825806Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-06T13:47:10.312Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T21:59:42.187Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "4.5"
},
{
"status": "affected",
"version": "4.6 MSR1"
},
{
"status": "affected",
"version": "4.7.1"
},
{
"status": "affected",
"version": "4.8.1"
},
{
"status": "affected",
"version": "4.8.1 SR1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1(2)SR1"
}
]
},
{
"product": "Cisco PhoneOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.0.1"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.3.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. \r\n\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-01T16:43:15.553Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"source": {
"advisory": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"defects": [
"CSCwi64103",
"CSCwi64077"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20376",
"datePublished": "2024-05-01T16:43:15.553Z",
"dateReserved": "2023-11-08T15:08:07.655Z",
"dateUpdated": "2024-08-01T21:59:42.187Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20378 (GCVE-0-2024-20378)
Vulnerability from nvd – Published: 2024-05-01 16:41 – Updated: 2024-08-01 21:59
VLAI?
Summary
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.
This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed.
Severity ?
7.5 (High)
CWE
- CWE-305 - Authentication Bypass by Primary Weakness
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.3.1 MSR2-6
Affected: 11.3.1 MSR3-3 Affected: 11.3.2 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR2 Affected: 11.3.3 MSR1 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.7 Affected: 11-3-1MSR2UPG Affected: 11.3.6SR1 Affected: 11.3.7SR1 Affected: 11.3.7SR2 Affected: 11.0.0 Affected: 11.0.1 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.1.1 Affected: 11.1.1 MSR1-1 Affected: 11.1.1 MSR2-1 Affected: 11.1.2 Affected: 11.1.2 MSR1-1 Affected: 11.1.2 MSR3-1 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.3 Affected: 11.2.3 MSR1-1 Affected: 11.2.4 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 4.5 Affected: 4.6 MSR1 Affected: 4.7.1 Affected: 4.8.1 Affected: 4.8.1 SR1 Affected: 5.0.1 Affected: 12.0.1 Affected: 12.0.2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 5.1.1 Affected: 5.1.2 Affected: 5.1(2)SR1 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6871_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6851_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6825_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6825_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7811_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:cisco:ip_phone_8800_series_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_8800_series_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "video_phone_8875_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20378",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-01T20:19:03.667220Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-06T13:47:37.828Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T21:59:42.451Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "4.5"
},
{
"status": "affected",
"version": "4.6 MSR1"
},
{
"status": "affected",
"version": "4.7.1"
},
{
"status": "affected",
"version": "4.8.1"
},
{
"status": "affected",
"version": "4.8.1 SR1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1(2)SR1"
}
]
},
{
"product": "Cisco PhoneOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.0.1"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.3.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. \r\n\r This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-305",
"description": "Authentication Bypass by Primary Weakness",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-01T16:41:52.385Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"source": {
"advisory": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"defects": [
"CSCwi64037",
"CSCwi64050"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20378",
"datePublished": "2024-05-01T16:41:52.385Z",
"dateReserved": "2023-11-08T15:08:07.655Z",
"dateUpdated": "2024-08-01T21:59:42.451Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-20357 (GCVE-0-2024-20357)
Vulnerability from nvd – Published: 2024-05-01 16:36 – Updated: 2024-08-01 21:59
VLAI?
Summary
A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device.
This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.
Severity ?
5.9 (Medium)
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.3.1 MSR2-6
Affected: 11.3.1 MSR3-3 Affected: 11.3.2 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR2 Affected: 11.3.3 MSR1 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.7 Affected: 11-3-1MSR2UPG Affected: 11.3.6SR1 Affected: 11.3.7SR1 Affected: 11.3.7SR2 Affected: 11.0.0 Affected: 11.0.1 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.1.1 Affected: 11.1.1 MSR1-1 Affected: 11.1.1 MSR2-1 Affected: 11.1.2 Affected: 11.1.2 MSR1-1 Affected: 11.1.2 MSR3-1 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.3 Affected: 11.2.3 MSR1-1 Affected: 11.2.4 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 4.5 Affected: 4.6 MSR1 Affected: 4.7.1 Affected: 4.8.1 Affected: 4.8.1 SR1 Affected: 5.0.1 Affected: 12.0.1 Affected: 12.0.2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 5.1.1 Affected: 5.1.2 Affected: 5.1(2)SR1 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6871_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6851_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7821_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7821_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6825_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6825_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_6841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7811_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7811_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7841_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7841_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:ip_phone_7861_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_7861_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:cisco:ip_phone_8800_series_with_multiplatform_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ip_phone_8800_series_with_multiplatform_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "video_phone_8875_firmware",
"vendor": "cisco",
"versions": [
{
"lessThanOrEqual": "12.0.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20357",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-01T20:55:26.843678Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-06T13:45:13.942Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T21:59:42.103Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.1 MSR4-1"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR2"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
},
{
"status": "affected",
"version": "4.5"
},
{
"status": "affected",
"version": "4.6 MSR1"
},
{
"status": "affected",
"version": "4.7.1"
},
{
"status": "affected",
"version": "4.8.1"
},
{
"status": "affected",
"version": "4.8.1 SR1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "12.0.1"
},
{
"status": "affected",
"version": "12.0.2"
},
{
"status": "affected",
"version": "12.0.3"
},
{
"status": "affected",
"version": "12.0.3SR1"
},
{
"status": "affected",
"version": "12.0.4"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1(2)SR1"
}
]
},
{
"product": "Cisco PhoneOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.0.1"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.3.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. \r\n\r This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-01T16:36:53.907Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS"
}
],
"source": {
"advisory": "cisco-sa-ipphone-multi-vulns-cXAhCvS",
"defects": [
"CSCwi64082",
"CSCwi64064"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20357",
"datePublished": "2024-05-01T16:36:53.907Z",
"dateReserved": "2023-11-08T15:08:07.649Z",
"dateUpdated": "2024-08-01T21:59:42.103Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-20221 (GCVE-0-2023-20221)
Vulnerability from nvd – Published: 2023-08-16 21:01 – Updated: 2024-08-02 09:05
VLAI?
Summary
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system.
This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition.
Severity ?
6.5 (Medium)
CWE
- CWE-352 - Cross-Site Request Forgery (CSRF)
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware |
Affected:
11.3.1 MSR2-6
Affected: 11.3.1 MSR3-3 Affected: 11.3.2 Affected: 11.3.3 Affected: 11.3.4 Affected: 11.3.5 Affected: 11.3.3 MSR1 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.7 Affected: 11-3-1MSR2UPG Affected: 11.3.6SR1 Affected: 11.3.7SR1 Affected: 11.3.7SR2 Affected: 11.0.0 Affected: 11.0.1 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.1.1 Affected: 11.1.1 MSR1-1 Affected: 11.1.1 MSR2-1 Affected: 11.1.2 Affected: 11.1.2 MSR1-1 Affected: 11.1.2 MSR3-1 Affected: 11.2.1 Affected: 11.2.2 Affected: 11.2.3 Affected: 11.2.3 MSR1-1 Affected: 11.2.4 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:05:35.927Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-ipphone-csrf-HOCmXW2c",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-csrf-HOCmXW2c"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IP Phones with Multiplatform Firmware",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "11.3.1 MSR2-6"
},
{
"status": "affected",
"version": "11.3.1 MSR3-3"
},
{
"status": "affected",
"version": "11.3.2"
},
{
"status": "affected",
"version": "11.3.3"
},
{
"status": "affected",
"version": "11.3.4"
},
{
"status": "affected",
"version": "11.3.5"
},
{
"status": "affected",
"version": "11.3.3 MSR1"
},
{
"status": "affected",
"version": "11.3.6"
},
{
"status": "affected",
"version": "11-3-1MPPSR4UPG"
},
{
"status": "affected",
"version": "11.3.7"
},
{
"status": "affected",
"version": "11-3-1MSR2UPG"
},
{
"status": "affected",
"version": "11.3.6SR1"
},
{
"status": "affected",
"version": "11.3.7SR1"
},
{
"status": "affected",
"version": "11.3.7SR2"
},
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.1 MSR1-1"
},
{
"status": "affected",
"version": "11.0.2"
},
{
"status": "affected",
"version": "11.1.1"
},
{
"status": "affected",
"version": "11.1.1 MSR1-1"
},
{
"status": "affected",
"version": "11.1.1 MSR2-1"
},
{
"status": "affected",
"version": "11.1.2"
},
{
"status": "affected",
"version": "11.1.2 MSR1-1"
},
{
"status": "affected",
"version": "11.1.2 MSR3-1"
},
{
"status": "affected",
"version": "11.2.1"
},
{
"status": "affected",
"version": "11.2.2"
},
{
"status": "affected",
"version": "11.2.3"
},
{
"status": "affected",
"version": "11.2.3 MSR1-1"
},
{
"status": "affected",
"version": "11.2.4"
},
{
"status": "affected",
"version": "11.3.1"
},
{
"status": "affected",
"version": "11.3.1 MSR1-3"
}
]
},
{
"product": "Cisco PhoneOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.0.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system.\r\n\r This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-01-25T16:58:23.679Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ipphone-csrf-HOCmXW2c",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-csrf-HOCmXW2c"
}
],
"source": {
"advisory": "cisco-sa-ipphone-csrf-HOCmXW2c",
"defects": [
"CSCwc78409",
"CSCwc81103",
"CSCwc78412"
],
"discovery": "INTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2023-20221",
"datePublished": "2023-08-16T21:01:05.872Z",
"dateReserved": "2022-10-27T18:47:50.368Z",
"dateUpdated": "2024-08-02T09:05:35.927Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}