CVE-2024-20376: high-severity vulnerability in Cisco IP Phones with Multiplatform Firmware
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.9%
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Related CVEs — Cisco IP Phones with Multiplatform Firmware
In the same product, most dangerous first.
CVE-2023-20078CRITICALCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI VulnerabilitiesEPSS 10.4%CVE-2023-20079CRITICALCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI VulnerabilitiesEPSS 10.3%CVE-2020-3574HIGHCisco IP Phone TCP Packet Flood Denial of Service VulnerabilityEPSS 8.0%CVE-2022-20817HIGHCisco IP Phone Duplicate Key VulnerabilityEPSS 1.2%CVE-2024-20378HIGHCVE-2024-20378EPSS 0.8%CVE-2024-20357MEDIUMCVE-2024-20357EPSS 0.5%