CVE-2023-20078: falha crítica em Cisco IP Phones with Multiplatform Firmware
Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
33Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 10%
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco IP Phones with Multiplatform FirmwareCVEs relacionadas — Cisco IP Phones with Multiplatform Firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2023-20079CRITICALCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI VulnerabilitiesEPSS 10.3%CVE-2020-3574HIGHCisco IP Phone TCP Packet Flood Denial of Service VulnerabilityEPSS 8.0%CVE-2022-20817HIGHCisco IP Phone Duplicate Key VulnerabilityEPSS 1.2%CVE-2024-20376HIGHCVE-2024-20376EPSS 0.9%CVE-2024-20378HIGHCVE-2024-20378EPSS 0.8%CVE-2024-20357MEDIUMCVE-2024-20357EPSS 0.5%