Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-20357

🗓️ 01 May 2024 16:36:53Reported by ciscoType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 67 Views

A Cisco IP Phone firmware vulnerability could allow unauthenticated remote attackers to initiate unauthorized phone calls by exploiting a flaw in XML service

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
Cisco		Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Vulnerabilities
1 May 202416:00
–cisco
CNNVD		Cisco IP Phone 安全漏洞
1 May 202400:00
–cnnvd
Cvelist		CVE-2024-20357
1 May 202416:36
–cvelist
EUVD		EUVD-2024-18072
3 Oct 202520:07
–euvd
NCSC		Vulnerabilities fixed in Cisco IP phones
2 May 202400:00
–ncsc
NVD		CVE-2024-20357
1 May 202417:15
–nvd
Positive Technologies		PT-2024-3515
1 May 202400:00
–ptsecurity
RedhatCVE		CVE-2024-20357
23 May 202507:02
–redhatcve
Vulnrichment		CVE-2024-20357
1 May 202416:36
–vulnrichment
NVD
Node
ciscoip_phone_6871_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_6871Match-
Node
ciscoip_phone_7811_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_7811Match-
Node
ciscoip_phone_7821_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_7821Match-
Node
ciscoip_phone_7832_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_7832Match-
Node
ciscoip_phone_7841_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_7841Match-
Node
ciscoip_phone_7861_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_7861Match-
Node
ciscoip_phone_8811_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_8811Match-
Node
ciscoip_phone_8832_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_8832Match-
Node
ciscoip_phone_8841_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_8841Match-
Node
ciscoip_phone_8845_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_8845Match-
Node
ciscoip_phone_8851_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_8851Match-
Node
ciscoip_phone_8861_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_8861Match-
Node
ciscoip_phone_8865_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_8865Match-
Node
ciscovideo_phone_8875_firmwareRange<2.3.1.0101
AND
ciscovideo_phone_8875Match-
Node
ciscoip_phone_6821_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_6821Match-
Node
ciscoip_phone_6841_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_6841Match-
Node
ciscoip_phone_6851_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_6851Match-
Node
ciscoip_phone_6861_with_multiplatform_firmwareRange≤12.0.4
AND
ciscoip_phone_6861Match-
[
  {
    "vendor": "Cisco",
    "product": "Cisco IP Phones with Multiplatform Firmware",
    "versions": [
      {
        "version": "11.3.1 MSR2-6",
        "status": "affected"
      },
      {
        "version": "11.3.1 MSR3-3",
        "status": "affected"
      },
      {
        "version": "11.3.2",
        "status": "affected"
      },
      {
        "version": "11.3.3",
        "status": "affected"
      },
      {
        "version": "11.3.1 MSR4-1",
        "status": "affected"
      },
      {
        "version": "11.3.4",
        "status": "affected"
      },
      {
        "version": "11.3.5",
        "status": "affected"
      },
      {
        "version": "11.3.3 MSR2",
        "status": "affected"
      },
      {
        "version": "11.3.3 MSR1",
        "status": "affected"
      },
      {
        "version": "11.3.6",
        "status": "affected"
      },
      {
        "version": "11-3-1MPPSR4UPG",
        "status": "affected"
      },
      {
        "version": "11.3.7",
        "status": "affected"
      },
      {
        "version": "11-3-1MSR2UPG",
        "status": "affected"
      },
      {
        "version": "11.3.6SR1",
        "status": "affected"
      },
      {
        "version": "11.3.7SR1",
        "status": "affected"
      },
      {
        "version": "11.3.7SR2",
        "status": "affected"
      },
      {
        "version": "11.0.0",
        "status": "affected"
      },
      {
        "version": "11.0.1",
        "status": "affected"
      },
      {
        "version": "11.0.1 MSR1-1",
        "status": "affected"
      },
      {
        "version": "11.0.2",
        "status": "affected"
      },
      {
        "version": "11.1.1",
        "status": "affected"
      },
      {
        "version": "11.1.1 MSR1-1",
        "status": "affected"
      },
      {
        "version": "11.1.1 MSR2-1",
        "status": "affected"
      },
      {
        "version": "11.1.2",
        "status": "affected"
      },
      {
        "version": "11.1.2 MSR1-1",
        "status": "affected"
      },
      {
        "version": "11.1.2 MSR3-1",
        "status": "affected"
      },
      {
        "version": "11.2.1",
        "status": "affected"
      },
      {
        "version": "11.2.2",
        "status": "affected"
      },
      {
        "version": "11.2.3",
        "status": "affected"
      },
      {
        "version": "11.2.3 MSR1-1",
        "status": "affected"
      },
      {
        "version": "11.2.4",
        "status": "affected"
      },
      {
        "version": "11.3.1",
        "status": "affected"
      },
      {
        "version": "11.3.1 MSR1-3",
        "status": "affected"
      },
      {
        "version": "4.5",
        "status": "affected"
      },
      {
        "version": "4.6 MSR1",
        "status": "affected"
      },
      {
        "version": "4.7.1",
        "status": "affected"
      },
      {
        "version": "4.8.1",
        "status": "affected"
      },
      {
        "version": "4.8.1 SR1",
        "status": "affected"
      },
      {
        "version": "5.0.1",
        "status": "affected"
      },
      {
        "version": "12.0.1",
        "status": "affected"
      },
      {
        "version": "12.0.2",
        "status": "affected"
      },
      {
        "version": "12.0.3",
        "status": "affected"
      },
      {
        "version": "12.0.3SR1",
        "status": "affected"
      },
      {
        "version": "12.0.4",
        "status": "affected"
      },
      {
        "version": "5.1.1",
        "status": "affected"
      },
      {
        "version": "5.1.2",
        "status": "affected"
      },
      {
        "version": "5.1(2)SR1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco PhoneOS",
    "versions": [
      {
        "version": "1.0.1",
        "status": "affected"
      },
      {
        "version": "2.1.1",
        "status": "affected"
      },
      {
        "version": "2.0.1",
        "status": "affected"
      },
      {
        "version": "2.3.1",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
05 Jan 2026 14:57Current
7High risk
Vulners AI Score7
CVSS 3.15.9
EPSS0.00608
SSVC
CWE-787
cisco ip phonefirmwarevulnerabilityremote attackerunauthorized phone callsxml service
67