CVE-2020-3161criticalunder attackCWE-20

CVE-2020-3161: critical vulnerability in Cisco IP phone

Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

Published · Updated

Follow this CVE+ Monitor Cisco IP phone+ Monitor Cisco IP Phones

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 9.8epss 84%
from disclosure to weapon2 days
Published on NVDApr 15
1st PoC+2d
CISA KEV+567d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A flaw in Cisco IP Phones' web server allows attackers to send crafted requests that execute malicious code with full system privileges or crash the phone. This happens because the server doesn't properly validate incoming requests.

Technical detail

Improper input validation in the HTTP request handler of Cisco IP Phones' web server enables unauthenticated remote code execution with root privileges or denial of service via crafted HTTP requests. No authentication is required; the attacker needs only network connectivity to the device's web interface.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Cisco · Cisco IP phone
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Cisco IP phone

In the same product, most dangerous first.

CVE-2020-3111HIGHCisco IP Phone Remote Code Execution and Denial of Service VulnerabilityEPSS 3.1%