CVE-2022-20660

🗓️ 14 Jan 2022 05:01:29Reported by ciscoType

A vulnerability in Cisco IP Phone models allows physical attacker to obtain confidential information

Reporter	Title	Published	Views	Family All 12
0day.today	Cisco IP Phone Cleartext Password Storage Vulnerability	17 Jan 202200:00	–	zdt
ATTACKERKB	CVE-2022-20660	13 Jan 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of IP-Cisco IP Phone microprogramming software, related to the unencrypted storage of confidential information, allows attackers to gain unauthorized access to protected information.	1 Feb 202200:00	–	bdu_fstec
Cisco	Cisco IP Phones Information Disclosure Vulnerability	12 Jan 202216:00	–	cisco
CNNVD	Cisco IP Phone 安全漏洞	12 Jan 202200:00	–	cnnvd
Cvelist	CVE-2022-20660 Cisco IP Phones Information Disclosure Vulnerability	14 Jan 202205:01	–	cvelist
EUVD	EUVD-2022-25910	3 Oct 202520:07	–	euvd
NVD	CVE-2022-20660	14 Jan 202205:15	–	nvd
Packet Storm	Cisco IP Phone Cleartext Password Storage	17 Jan 202200:00	–	packetstorm
Prion	Design/Logic Flaw	14 Jan 202205:15	–	prion

NVD

Node

cisco ip_conference_phone_7832_firmwareRange<14.1(1)

AND

cisco ip_conference_phone_7832Match-

Node

cisco ip_conference_phone_8832_firmwareRange<14.1(1)

AND

cisco ip_conference_phone_8832Match-

Node

cisco ip_phone_7811_firmwareRange<14.1(1)

AND

cisco ip_phone_7811Match-

Node

cisco ip_phone_7821_firmwareRange<14.1(1)

AND

cisco ip_phone_7821Match-

Node

cisco ip_phone_7841_firmwareRange<14.1(1)

AND

cisco ip_phone_7841Match-

Node

cisco ip_phone_7861_firmwareRange<14.1(1)

AND

cisco ip_phone_7861Match-

Node

cisco ip_phone_8811_firmwareRange<14.1(1)

AND

cisco ip_phone_8811Match-

Node

cisco ip_phone_8841_firmwareRange<14.1(1)

AND

cisco ip_phone_8841Match-

Node

cisco ip_phone_8845_firmwareRange<14.1(1)

AND

cisco ip_phone_8845Match-

Node

cisco ip_phone_8851_firmwareRange<14.1(1)

AND

cisco ip_phone_8851Match-

Node

cisco ip_phone_8861_firmwareRange<14.1(1)

AND

cisco ip_phone_8861Match-

Node

cisco ip_phone_8865_firmwareRange<14.1(1)

AND

cisco ip_phone_8865Match-

Node

cisco unified_ip_conference_phone_8831_firmwareMatch-

AND

cisco unified_ip_conference_phone_8831Match-

Node

cisco unified_ip_conference_phone_8831_for_third-party_call_control_firmwareMatch-

AND

cisco unified_ip_conference_phone_8831_for_third-party_call_controlMatch-

Node

cisco unified_ip_phone_7945g_firmwareMatch-

AND

cisco unified_ip_phone_7945gMatch-

Node

cisco unified_ip_phone_7965g_firmwareMatch-

AND

cisco unified_ip_phone_7965gMatch-

Node

cisco unified_ip_phone_7975g_firmwareMatch-

AND

cisco unified_ip_phone_7975gMatch-

Node

cisco unified_sip_phone_3905_firmwareRange<9.4(1)sr5

AND

cisco unified_sip_phone_3905Match-

Node

cisco wireless_ip_phone_8821_firmwareRange<11.0(6)sr2

AND

cisco wireless_ip_phone_8821Match-

Node

cisco wireless_ip_phone_8821-ex_firmwareRange<11.0(6)sr2

AND

cisco wireless_ip_phone_8821-exMatch-

[
  {
    "product": "Cisco Session Initiation Protocol (SIP) Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-info-disc-fRdJfOxA
seclists	www.seclists.org/fulldisclosure/2022/Jan/34
packetstormsecurity	www.packetstormsecurity.com/files/165567/Cisco-IP-Phone-Cleartext-Password-Storage.html

17 Jun 2026 04:24Current

4.3Medium risk

Vulners AI Score4.3

CVSS 22.1

CVSS 3.14.6

EPSS0.00351

SSVC

CWE-312

cisco ip phone vulnerability information storage unauthenticated physical attacker confidential information exploit nvd