critical9.8
CVE-2023-20079
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary …
Impact
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ip Phone 6871 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 6861 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 6851 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 6841 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 6825 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 7861 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 7841 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 7832 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 7821 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 7811 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 8865 Firmware | before 11.3.7sr1 |
| Cisco | Ip Phone 8861 Firmware | before 11.3.7sr1 |