Vulnerability-Lookup

CNVD-2024-45292

Vulnerability from cnvd - Published: 2024-11-21

Title

Cisco IP Phone跨站脚本漏洞（CNVD-2024-45292）

Description

Cisco IP Phone是美国思科（Cisco）公司的一个硬件设备。提供通话功能的IP电话。 Cisco IP Phone存在跨站脚本漏洞，该漏洞源于受影响设备的WebUI未正确验证用户提供的输入。经过身份验证的远程攻击者可利用该漏洞在受影响的界面上下文中执行任意脚本代码，或者访问敏感的、基于浏览器的信息。

Severity

中

Patch Name

Cisco IP Phone跨站脚本漏洞（CNVD-2024-45292）的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-20534

Impacted products

Name
Cisco IP Phones

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-20534",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-20534"
    }
  },
  "description": "Cisco IP Phone\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u786c\u4ef6\u8bbe\u5907\u3002\u63d0\u4f9b\u901a\u8bdd\u529f\u80fd\u7684IP\u7535\u8bdd\u3002\n\nCisco IP Phone\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u7684WebUI\u672a\u6b63\u786e\u9a8c\u8bc1\u7528\u6237\u63d0\u4f9b\u7684\u8f93\u5165\u3002\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u754c\u9762\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u811a\u672c\u4ee3\u7801\uff0c\u6216\u8005\u8bbf\u95ee\u654f\u611f\u7684\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u4fe1\u606f\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-45292",
  "openTime": "2024-11-21",
  "patchDescription": "Cisco IP Phone\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u786c\u4ef6\u8bbe\u5907\u3002\u63d0\u4f9b\u901a\u8bdd\u529f\u80fd\u7684IP\u7535\u8bdd\u3002\r\n\r\nCisco IP Phone\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u7684WebUI\u672a\u6b63\u786e\u9a8c\u8bc1\u7528\u6237\u63d0\u4f9b\u7684\u8f93\u5165\u3002\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u754c\u9762\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u811a\u672c\u4ee3\u7801\uff0c\u6216\u8005\u8bbf\u95ee\u654f\u611f\u7684\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco IP Phone\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2024-45292\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco IP Phones"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2024-20534",
  "serverity": "\u4e2d",
  "submitTime": "2024-11-13",
  "title": "Cisco IP Phone\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2024-45292\uff09"
}

CVE-2024-20534 (GCVE-0-2024-20534)

Vulnerability from cvelistv5 – Published: 2024-11-06 16:31 – Updated: 2024-11-06 17:00

Title

Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability

Summary

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users. This vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Note: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default.

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-06 16:59 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

cisco mitre root

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

2 products

Vendor	Product	Version
Cisco	Cisco IP Phones with Multiplatform Firmware	Affected: 11.1.2 Affected: 11.2.1 Affected: 11.2.3 Affected: 11.2.2 Affected: 11.2.3 MSR1-1 Affected: 11.1.2 MSR1-1 Affected: 11.1.1 Affected: 11.1.2 MSR3-1 Affected: 11.0.0 Affected: 11.1.1 MSR1-1 Affected: 11.0.1 Affected: 11.1.1 MSR2-1 Affected: 11.2.4 Affected: 11.0.1 MSR1-1 Affected: 11.0.2 Affected: 11.3.1 Affected: 11.3.1 MSR1-3 Affected: 11.3.2 Affected: 11.3.1 MSR2-6 Affected: 11-3-1MSR2UPG Affected: 4.7.1 Affected: 4.6 MSR1 Affected: 11.3.1 MSR3-3 Affected: 4.8.1 Affected: 11.3.3 Affected: 11.3.1 MSR4-1 Affected: 11.3.4 Affected: 4.8.1 SR1 Affected: 11.3.5 Affected: 11.3.3 MSR1 Affected: 5.0.1 Affected: 11.3.3 MSR2 Affected: 11.3.6 Affected: 11-3-1MPPSR4UPG Affected: 11.3.6SR1 Affected: 11.3.7 Affected: 5.1.1 Affected: 11.3.7SR1 Affected: 12.0.1 Affected: 12.0.2 Affected: 11.3.7SR2 Affected: 12.0.3 Affected: 12.0.3SR1 Affected: 12.0.4 Affected: 12.0.4SR1 Affected: 12.0.5 Affected: 12.0.5SR1 Affected: 12.0.3SR2
Cisco	Cisco Session Initiation Protocol (SIP) Software	Affected: 3.1(1) Affected: 3.0(1) Affected: 3.1(1)SR1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20534",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T16:59:56.911012Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T17:00:08.112Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco IP Phones with Multiplatform Firmware",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "11.1.2"
            },
            {
              "status": "affected",
              "version": "11.2.1"
            },
            {
              "status": "affected",
              "version": "11.2.3"
            },
            {
              "status": "affected",
              "version": "11.2.2"
            },
            {
              "status": "affected",
              "version": "11.2.3 MSR1-1"
            },
            {
              "status": "affected",
              "version": "11.1.2 MSR1-1"
            },
            {
              "status": "affected",
              "version": "11.1.1"
            },
            {
              "status": "affected",
              "version": "11.1.2 MSR3-1"
            },
            {
              "status": "affected",
              "version": "11.0.0"
            },
            {
              "status": "affected",
              "version": "11.1.1 MSR1-1"
            },
            {
              "status": "affected",
              "version": "11.0.1"
            },
            {
              "status": "affected",
              "version": "11.1.1 MSR2-1"
            },
            {
              "status": "affected",
              "version": "11.2.4"
            },
            {
              "status": "affected",
              "version": "11.0.1 MSR1-1"
            },
            {
              "status": "affected",
              "version": "11.0.2"
            },
            {
              "status": "affected",
              "version": "11.3.1"
            },
            {
              "status": "affected",
              "version": "11.3.1 MSR1-3"
            },
            {
              "status": "affected",
              "version": "11.3.2"
            },
            {
              "status": "affected",
              "version": "11.3.1 MSR2-6"
            },
            {
              "status": "affected",
              "version": "11-3-1MSR2UPG"
            },
            {
              "status": "affected",
              "version": "4.7.1"
            },
            {
              "status": "affected",
              "version": "4.6 MSR1"
            },
            {
              "status": "affected",
              "version": "11.3.1 MSR3-3"
            },
            {
              "status": "affected",
              "version": "4.8.1"
            },
            {
              "status": "affected",
              "version": "11.3.3"
            },
            {
              "status": "affected",
              "version": "11.3.1 MSR4-1"
            },
            {
              "status": "affected",
              "version": "11.3.4"
            },
            {
              "status": "affected",
              "version": "4.8.1 SR1"
            },
            {
              "status": "affected",
              "version": "11.3.5"
            },
            {
              "status": "affected",
              "version": "11.3.3 MSR1"
            },
            {
              "status": "affected",
              "version": "5.0.1"
            },
            {
              "status": "affected",
              "version": "11.3.3 MSR2"
            },
            {
              "status": "affected",
              "version": "11.3.6"
            },
            {
              "status": "affected",
              "version": "11-3-1MPPSR4UPG"
            },
            {
              "status": "affected",
              "version": "11.3.6SR1"
            },
            {
              "status": "affected",
              "version": "11.3.7"
            },
            {
              "status": "affected",
              "version": "5.1.1"
            },
            {
              "status": "affected",
              "version": "11.3.7SR1"
            },
            {
              "status": "affected",
              "version": "12.0.1"
            },
            {
              "status": "affected",
              "version": "12.0.2"
            },
            {
              "status": "affected",
              "version": "11.3.7SR2"
            },
            {
              "status": "affected",
              "version": "12.0.3"
            },
            {
              "status": "affected",
              "version": "12.0.3SR1"
            },
            {
              "status": "affected",
              "version": "12.0.4"
            },
            {
              "status": "affected",
              "version": "12.0.4SR1"
            },
            {
              "status": "affected",
              "version": "12.0.5"
            },
            {
              "status": "affected",
              "version": "12.0.5SR1"
            },
            {
              "status": "affected",
              "version": "12.0.3SR2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Session Initiation Protocol (SIP) Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.1(1)"
            },
            {
              "status": "affected",
              "version": "3.0(1)"
            },
            {
              "status": "affected",
              "version": "3.1(1)SR1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users.\r\n\r\nThis vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.\r\nNote: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-06T16:55:30.873Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-mpp-xss-8tAV2TvF",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF"
        }
      ],
      "source": {
        "advisory": "cisco-sa-mpp-xss-8tAV2TvF",
        "defects": [
          "CSCwm39676"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20534",
    "datePublished": "2024-11-06T16:31:30.293Z",
    "dateReserved": "2023-11-08T15:08:07.692Z",
    "dateUpdated": "2024-11-06T17:00:08.112Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.