CVE-2019-1764

🗓️ 22 Mar 2019 20:05:29Reported by ciscoType

A CSRF vulnerability in the web-based management interface of Cisco IP Phone 8800 Series SIP Software allows remote attackers to perform unauthorized actions

Reporter	Title	Published	Views	Family All 8
Cisco	Cisco IP Phone 8800 Series Cross-Site Request Forgery Vulnerability	20 Mar 201916:00	–	cisco
Cvelist	CVE-2019-1764 Cisco IP Phone 8800 Series Cross-Site Request Forgery Vulnerability	22 Mar 201920:05	–	cvelist
EUVD	EUVD-2019-10321	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1764	22 Mar 201920:29	–	nvd
Prion	Cross site request forgery (csrf)	22 Mar 201920:29	–	prion
Tenable Nessus	Cisco IP Phones 8800 Series Cross-Site Request Forgery (CVE-2019-1764)	18 Mar 202400:00	–	nessus
ThreatPost	Cisco Patches High-Severity Flaws in IP Phones	21 Mar 201913:31	–	threatpost
Vulnrichment	CVE-2019-1764 Cisco IP Phone 8800 Series Cross-Site Request Forgery Vulnerability	22 Mar 201920:05	–	vulnrichment

NVD

Node

cisco ip_phone_8821_firmwareRange<11.0(5)

AND

cisco ip_phone_8821Match-

Node

cisco ip_phone_8821-ex_firmwareRange<11.0(5)

AND

cisco ip_phone_8821-exMatch-

Node

cisco ip_conference_phone_8832_firmwareRange<12.5(1)sr1

AND

cisco ip_conference_phone_8832Match-

Node

cisco ip_phone_8800_firmwareRange<12.5(1)sr1

AND

cisco ip_phone_8800Match-

[
  {
    "product": "Cisco Wireless IP Phone 8821 and 8821-EX",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "11.0(5)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cisco IP Conference Phone 8832 and the rest of the IP Phone 8800 Series",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "12.5(1)SR1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190320-ip-phone-csrf

21 Nov 2024 04:37Current

8.4High risk

Vulners AI Score8.4

CVSS 26.8

CVSS 38.1 - 8.8

EPSS0.00189

SSVC

CWE-352