CVE-2020-3161
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco IP Phone 11.7 - Denial of service (PoC)2020-04-17 · dos · hardware
Impact
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ip Phone 8865 Firmware | Versions 10.3\(1\)es14, 11.0\(1\), 11.0\(5\)sr1 |
| Cisco | Ip Phone 8851 Firmware | Versions 10.3\(1\)es14, 11.0\(1\), 11.0\(5\)sr1 |
| Cisco | Ip Phone 7841 Firmware | Version 11.0\(1\) |
| Cisco | Ip Phone 7821 Firmware | Version 11.0\(1\) |
| Cisco | Ip Phone 8811 Firmware | Versions 10.3\(1\)es14, 11.0\(1\), 11.0\(5\)sr1 |
| Cisco | Ip Phone 8861 Firmware | Versions 10.3\(1\)es14, 11.0\(1\), 11.0\(5\)sr1 |
| Cisco | Ip Phone 8845 Firmware | Versions 10.3\(1\)es14, 11.0\(1\), 11.0\(5\)sr1 |
| Cisco | Ip Phone 7861 Firmware | Version 11.0\(1\) |
| Cisco | Ip Phone 8841 Firmware | Versions 10.3\(1\)es14, 11.0\(1\), 11.0\(5\)sr1 |
| Cisco | Ip Phone 7811 Firmware | Version 11.0\(1\) |
| Cisco | Ip Phone 8821 Firmware | Versions 10.3\(1\)es14, 11.0\(1\), 11.0\(5\)sr1 |
| Cisco | Ip Phone 8821-Ex Firmware | Versions 10.3\(1\)es14, 11.0\(1\), 11.0\(5\)sr1 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://packetstormsecurity.com/files/157265/Cisco-IP-Phone-11.7-Denial-Of-Service.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs
- http://packetstormsecurity.com/files/157265/Cisco-IP-Phone-11.7-Denial-Of-Service.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3161