high7.5
CVE-2024-20376
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to…
Impact
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Video Phone 8875 Firmware | before 2.3.1.0101 |
| Cisco | Ip Phone 6821 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 6841 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 6851 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 6861 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 6871 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 7811 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 7821 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 7832 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 7841 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 7861 With Multiplatform Firmware | through 12.0.4 |
| Cisco | Ip Phone 8811 With Multiplatform Firmware | through 12.0.4 |