9.8
Critical
CVE-2023-20078 Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an…
Description
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IP Phones with Multiplatform Firmware | Versions not published |
References
- 20230302 Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco IP Phones with Multiplatform Firmware
The 13 CVEs of Cisco IP Phones with Multiplatform Firmware →
CVE-2021-1379
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations…
6.5
Medium
CVE-2024-20534
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco…
4.8
Medium
CVE-2024-20533
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco…
4.8
Medium
CVE-2024-20376
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated,…
7.5
High