Advisories · Technology

Cisco IP Phones with Multiplatform Firmware.

Every CVE that names Cisco IP Phones with Multiplatform Firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-1379 CVE record

CVSS 6.5 Medium

Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities
- Cisco IP Phones with Multiplatform Firmware
- Cisco Session Initiation Protocol (SIP) Software
- Memory corruption
Not analysed yet 18 Nov 2024
CVE-2024-20534 CVE record

CVSS 4.8 Medium

Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability
- Cisco IP Phones with Multiplatform Firmware
- Cisco Session Initiation Protocol (SIP) Software
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2024
CVE-2024-20533 CVE record

CVSS 4.8 Medium

Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities
- Cisco IP Phones with Multiplatform Firmware
- Cisco Session Initiation Protocol (SIP) Software
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2024
CVE-2024-20376 CVE record

CVSS 7.5 High

Out-of-bounds write in Cisco IP Phones with Multiplatform Firmware and others
- Cisco IP Phones with Multiplatform Firmware
- Cisco PhoneOS
- Memory corruption
Not analysed yet 1 May 2024
CVE-2024-20378 CVE record

CVSS 7.5 High

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.
- Cisco IP Phones with Multiplatform Firmware
- Cisco PhoneOS
- CWE-305
Not analysed yet 1 May 2024
CVE-2024-20357 CVE record

CVSS 5.9 Medium

Out-of-bounds write in Cisco IP Phones with Multiplatform Firmware and others
- Cisco IP Phones with Multiplatform Firmware
- Cisco PhoneOS
- Memory corruption
Not analysed yet 1 May 2024
CVE-2023-20265 CVE record

CVSS 5.5 Medium

Cross-site scripting in Cisco IP Phones with Multiplatform Firmware and others
- Cisco IP Phones with Multiplatform Firmware
- Cisco Session Initiation Protocol (SIP) Software
- Cross-site scripting (XSS)
Not analysed yet 21 Nov 2023
CVE-2023-20221 CVE record

CVSS 6.5 Medium

Cross-site request forgery in Cisco IP Phones with Multiplatform Firmware and others
- Cisco IP Phones with Multiplatform Firmware
- Cisco PhoneOS
- Cross-site request forgery (CSRF)
Not analysed yet 16 Aug 2023
CVE-2023-20079 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
- Cisco IP Phones with Multiplatform Firmware
- Memory corruption
Not analysed yet 3 Mar 2023
CVE-2023-20078 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
- Cisco IP Phones with Multiplatform Firmware
- Memory corruption
Not analysed yet 3 Mar 2023
CVE-2022-20817 CVE record

CVSS 7.4 High

Cisco IP Phone Duplicate Key Vulnerability
- Cisco IP Phones with Multiplatform Firmware
- Weak cryptography or TLS
Not analysed yet 15 Jun 2022
CVE-2021-34711 CVE record

CVSS 5.5 Medium

Cisco IP Phone Software Arbitrary File Read Vulnerability
- Cisco IP Phones with Multiplatform Firmware
- Path traversal
Not analysed yet 6 Oct 2021
CVE-2020-3574 CVE record

CVSS 7.5 High

Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability
- Cisco IP Phones with Multiplatform Firmware
- CWE-371
Not analysed yet 6 Nov 2020