Lucene search

[email protected]CVE-2023-20079

HistoryMar 03, 2023 - 4:15 p.m.

CVE-2023-20079

2023-03-0316:15:10

CWE-787

CWE-121

[email protected]

web.nvd.nist.gov

cve-2023-20079

cisco

ip phones

web-based management

vulnerabilities

remote code execution

dos

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

54.1%

JSON

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

CPENameOperatorVersion
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwarelt11.3.7sr1
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq11.2\(3\)
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq-
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq11.3.5
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq11.1\(1\)sr2
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq11.2\(1\)
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq11.3\(1\)
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq11.3\(1\)sr1
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq11.2\(3\)sr1
cisco:ip_phone_6871_firmwarecisco ip phone 6871 firmwareeq11.1\(1\)sr3

CPE	Name	Operator	Version
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	lt	11.3.7sr1
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	11.2\(3\)
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	-
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	11.3.5
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	11.1\(1\)sr2
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	11.2\(1\)
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	11.3\(1\)
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	11.3\(1\)sr1
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	11.2\(3\)sr1
cisco:ip_phone_6871_firmware	cisco ip phone 6871 firmware	eq	11.1\(1\)sr3

Rows per page:

1-10 of 161

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

54.1%

JSON

Related for CVE-2023-20079

cvelist1 nessus2 prion1 cisco1 thn1