CVE-2024-20357

🗓️ 01 May 2024 16:36:53Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 132 Views

A Cisco IP Phone firmware vulnerability could allow unauthenticated remote attackers to initiate unauthorized phone calls by exploiting a flaw in XML service

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	Cisco IP Phones Telephone Call	17 May 202400:00	–	bdu_fstec
Cisco	Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Vulnerabilities	1 May 202416:00	–	cisco
Tenable Nessus	Cisco IP and Video Phone Multiple Vulnerabilities (cisco-sa-ipphone-multi-vulns-cXAhCvS)	17 Jul 202600:00	–	nessus
CNNVD	Cisco IP Phone 安全漏洞	1 May 202400:00	–	cnnvd
Cvelist	CVE-2024-20357	1 May 202416:36	–	cvelist
EUVD	EUVD-2024-18072	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco IP phones	2 May 202400:00	–	ncsc
NVD	CVE-2024-20357	1 May 202417:15	–	nvd
osv_cve	CVE-2024-20357	1 May 202417:15	–	osv_cve
Positive Technologies	PT-2024-3515	1 May 202400:00	–	ptsecurity

NVD

Node

AND

cisco ip_phone_6871_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_6871Match-

Node

AND

cisco ip_phone_7811_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_7811Match-

Node

AND

cisco ip_phone_7821_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_7821Match-

Node

AND

cisco ip_phone_7832_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_7832Match-

Node

AND

cisco ip_phone_7841_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_7841Match-

Node

AND

cisco ip_phone_7861_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_7861Match-

Node

AND

cisco ip_phone_8811_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_8811Match-

Node

AND

cisco ip_phone_8832_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_8832Match-

Node

AND

cisco ip_phone_8841_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_8841Match-

Node

AND

cisco ip_phone_8845_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_8845Match-

Node

AND

cisco ip_phone_8851_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_8851Match-

Node

AND

cisco ip_phone_8861_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_8861Match-

Node

AND

cisco ip_phone_8865_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_8865Match-

Node

AND

cisco video_phone_8875_firmwareRange<2.3.1.0101

cisco video_phone_8875Match-

Node

AND

cisco ip_phone_6821_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_6821Match-

Node

AND

cisco ip_phone_6841_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_6841Match-

Node

AND

cisco ip_phone_6851_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_6851Match-

Node

AND

cisco ip_phone_6861_with_multiplatform_firmwareRange≤12.0.4

cisco ip_phone_6861Match-

[
  {
    "vendor": "Cisco",
    "product": "Cisco IP Phones with Multiplatform Firmware",
    "versions": [
      {
        "version": "11.3.1 MSR2-6",
        "status": "affected"
      },
      {
        "version": "11.3.1 MSR3-3",
        "status": "affected"
      },
      {
        "version": "11.3.2",
        "status": "affected"
      },
      {
        "version": "11.3.3",
        "status": "affected"
      },
      {
        "version": "11.3.1 MSR4-1",
        "status": "affected"
      },
      {
        "version": "11.3.4",
        "status": "affected"
      },
      {
        "version": "11.3.5",
        "status": "affected"
      },
      {
        "version": "11.3.3 MSR2",
        "status": "affected"
      },
      {
        "version": "11.3.3 MSR1",
        "status": "affected"
      },
      {
        "version": "11.3.6",
        "status": "affected"
      },
      {
        "version": "11-3-1MPPSR4UPG",
        "status": "affected"
      },
      {
        "version": "11.3.7",
        "status": "affected"
      },
      {
        "version": "11-3-1MSR2UPG",
        "status": "affected"
      },
      {
        "version": "11.3.6SR1",
        "status": "affected"
      },
      {
        "version": "11.3.7SR1",
        "status": "affected"
      },
      {
        "version": "11.3.7SR2",
        "status": "affected"
      },
      {
        "version": "11.0.0",
        "status": "affected"
      },
      {
        "version": "11.0.1",
        "status": "affected"
      },
      {
        "version": "11.0.1 MSR1-1",
        "status": "affected"
      },
      {
        "version": "11.0.2",
        "status": "affected"
      },
      {
        "version": "11.1.1",
        "status": "affected"
      },
      {
        "version": "11.1.1 MSR1-1",
        "status": "affected"
      },
      {
        "version": "11.1.1 MSR2-1",
        "status": "affected"
      },
      {
        "version": "11.1.2",
        "status": "affected"
      },
      {
        "version": "11.1.2 MSR1-1",
        "status": "affected"
      },
      {
        "version": "11.1.2 MSR3-1",
        "status": "affected"
      },
      {
        "version": "11.2.1",
        "status": "affected"
      },
      {
        "version": "11.2.2",
        "status": "affected"
      },
      {
        "version": "11.2.3",
        "status": "affected"
      },
      {
        "version": "11.2.3 MSR1-1",
        "status": "affected"
      },
      {
        "version": "11.2.4",
        "status": "affected"
      },
      {
        "version": "11.3.1",
        "status": "affected"
      },
      {
        "version": "11.3.1 MSR1-3",
        "status": "affected"
      },
      {
        "version": "4.5",
        "status": "affected"
      },
      {
        "version": "4.6 MSR1",
        "status": "affected"
      },
      {
        "version": "4.7.1",
        "status": "affected"
      },
      {
        "version": "4.8.1",
        "status": "affected"
      },
      {
        "version": "4.8.1 SR1",
        "status": "affected"
      },
      {
        "version": "5.0.1",
        "status": "affected"
      },
      {
        "version": "12.0.1",
        "status": "affected"
      },
      {
        "version": "12.0.2",
        "status": "affected"
      },
      {
        "version": "12.0.3",
        "status": "affected"
      },
      {
        "version": "12.0.3SR1",
        "status": "affected"
      },
      {
        "version": "12.0.4",
        "status": "affected"
      },
      {
        "version": "5.1.1",
        "status": "affected"
      },
      {
        "version": "5.1.2",
        "status": "affected"
      },
      {
        "version": "5.1(2)SR1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco PhoneOS",
    "versions": [
      {
        "version": "1.0.1",
        "status": "affected"
      },
      {
        "version": "2.1.1",
        "status": "affected"
      },
      {
        "version": "2.0.1",
        "status": "affected"
      },
      {
        "version": "2.3.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS

17 Jun 2026 07:06Current

7High risk

Vulners AI Score7

CVSS 3.15.9

EPSS0.00499

SSVC

CWE-787