# Cisco IP Phones with Multiplatform Firmware.

Every CVE that names Cisco IP Phones with Multiplatform Firmware among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1379.md)
  `CVE-2021-1379` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption
- [Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2024-20534.md)
  `CVE-2024-20534` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2024-20533.md)
  `CVE-2024-20533` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Out-of-bounds write in Cisco IP Phones with Multiplatform Firmware and others](https://agentprime.io/advisories/CVE-2024-20376.md)
  `CVE-2024-20376` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 1 more · CVSS 7.5 High · Not analysed yet · Published 1 May 2024 · Tags: Memory corruption
- [A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.](https://agentprime.io/advisories/CVE-2024-20378.md)
  `CVE-2024-20378` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 1 more · CVSS 7.5 High · Not analysed yet · Published 1 May 2024 · Tags: CWE-305
- [Out-of-bounds write in Cisco IP Phones with Multiplatform Firmware and others](https://agentprime.io/advisories/CVE-2024-20357.md)
  `CVE-2024-20357` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 1 May 2024 · Tags: Memory corruption
- [Cross-site scripting in Cisco IP Phones with Multiplatform Firmware and others](https://agentprime.io/advisories/CVE-2023-20265.md)
  `CVE-2023-20265` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site request forgery in Cisco IP Phones with Multiplatform Firmware and others](https://agentprime.io/advisories/CVE-2023-20221.md)
  `CVE-2023-20221` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: Cross-site request forgery (CSRF)
- [Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20079.md)
  `CVE-2023-20079` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 3 Mar 2023 · Tags: Memory corruption
- [Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20078.md)
  `CVE-2023-20078` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 3 Mar 2023 · Tags: Memory corruption
- [Cisco IP Phone Duplicate Key Vulnerability](https://agentprime.io/advisories/CVE-2022-20817.md)
  `CVE-2022-20817` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware · CVSS 7.4 High · Not analysed yet · Published 15 Jun 2022 · Tags: Weak cryptography or TLS
- [Cisco IP Phone Software Arbitrary File Read Vulnerability](https://agentprime.io/advisories/CVE-2021-34711.md)
  `CVE-2021-34711` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: Path traversal
- [Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3574.md)
  `CVE-2020-3574` · CVE record: Cisco Cisco IP Phones with Multiplatform Firmware · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2020 · Tags: CWE-371

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-ip-phones-with-multiplatform-firmware>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-ip-phones-with-multiplatform-firmware/>. Everything for agents: <https://agentprime.io/llms.txt>.