CVE-2024-20445

🗓️ 06 Nov 2024 16:29:06Reported by ciscoType

A vulnerability allows unauthorized access to sensitive information on Cisco Desk Phone and Video Phon

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-20445	6 Nov 202416:30	–	circl
Cisco	Cisco 7800, 8800, and 9800 Series Phones Information Disclosure Vulnerability	6 Nov 202416:00	–	cisco
Tenable Nessus	Cisco IP Phones Information Disclosure (cisco-sa-phone-infodisc-sbyqQVbG)	15 Nov 202400:00	–	nessus
CNNVD	Cisco IP Phone 信息泄露漏洞	6 Nov 202400:00	–	cnnvd
CNVD	Cisco IP Phone Information Disclosure Vulnerability	11 Nov 202400:00	–	cnvd
Cvelist	CVE-2024-20445 Cisco IP Phone 7800, 8800, and 9800 Series Information Disclosure Vulnerability	6 Nov 202416:29	–	cvelist
EUVD	EUVD-2024-18160	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20445	6 Nov 202417:15	–	nvd
OSV	CVE-2024-20445	6 Nov 202417:15	–	osv
Positive Technologies	PT-2024-7957	6 Nov 202400:00	–	ptsecurity

NVD

Node

cisco desk_phone_9841_firmwareMatch3.1(1)-

cisco desk_phone_9841_firmwareMatch3.1(1)sr1

AND

cisco desk_phone_9841Match-

Node

cisco desk_phone_9851_firmwareMatch3.1(1)-

cisco desk_phone_9851_firmwareMatch3.1(1)sr1

AND

cisco desk_phone_9851Match-

Node

cisco desk_phone_9861_firmwareMatch3.1(1)-

cisco desk_phone_9861_firmwareMatch3.1(1)sr1

AND

cisco desk_phone_9861Match-

Node

cisco desk_phone_9871_firmwareMatch3.1(1)-

cisco desk_phone_9871_firmwareMatch3.1(1)sr1

AND

cisco desk_phone_9871Match-

Node

cisco ip_conference_phone_7832_firmwareRange<14.3(1)

AND

cisco ip_conference_phone_7832Match-

Node

cisco ip_conference_phone_8831_firmwareRange<14.3(1)

AND

cisco ip_conference_phone_8831Match-

Node

cisco ip_conference_phone_8832_firmwareRange<14.3(1)

AND

cisco ip_conference_phone_8832Match-

Node

cisco ip_phone_7811_firmwareRange<14.3(1)

AND

cisco ip_phone_7811Match-

Node

cisco ip_phone_7821_firmwareRange<14.3(1)

AND

cisco ip_phone_7821Match-

Node

cisco ip_phone_7841_firmwareRange<14.3(1)

AND

cisco ip_phone_7841Match-

Node

cisco ip_phone_7861_firmwareRange<14.3(1)

AND

cisco ip_phone_7861Match-

Node

cisco ip_phone_8811_firmwareRange<14.3(1)

AND

cisco ip_phone_8811Match-

Node

cisco ip_phone_8841_firmwareRange<14.3(1)

AND

cisco ip_phone_8841Match-

Node

cisco ip_phone_8845_firmwareRange<14.3(1)

AND

cisco ip_phone_8845Match-

Node

cisco ip_phone_8851_firmwareRange<14.3(1)

AND

cisco ip_phone_8851Match-

Node

cisco ip_phone_8851nr_firmwareRange<14.3(1)

AND

cisco ip_phone_8851nrMatch-

Node

cisco ip_phone_8861_firmwareRange<14.3(1)

AND

cisco ip_phone_8861Match-

Node

cisco video_phone_8875_firmwareRange<2.3(1)

cisco video_phone_8875_firmwareMatch2.3(1)-

cisco video_phone_8875_firmwareMatch2.3(1)sr1

AND

cisco video_phone_8875Match-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Session Initiation Protocol (SIP) Software",
    "versions": [
      {
        "version": "12.1(1)SR1",
        "status": "affected"
      },
      {
        "version": "11.5(1)",
        "status": "affected"
      },
      {
        "version": "10.3(2)",
        "status": "affected"
      },
      {
        "version": "10.2(2)",
        "status": "affected"
      },
      {
        "version": "10.3(1)",
        "status": "affected"
      },
      {
        "version": "10.3(1)SR4",
        "status": "affected"
      },
      {
        "version": "11.0(1)",
        "status": "affected"
      },
      {
        "version": "10.4(1)SR2 3rd Party",
        "status": "affected"
      },
      {
        "version": "11.7(1)",
        "status": "affected"
      },
      {
        "version": "12.1(1)",
        "status": "affected"
      },
      {
        "version": "11.0(0.7) MPP",
        "status": "affected"
      },
      {
        "version": "9.3(4) 3rd Party",
        "status": "affected"
      },
      {
        "version": "12.5(1)SR2",
        "status": "affected"
      },
      {
        "version": "10.2(1)SR1",
        "status": "affected"
      },
      {
        "version": "9.3(4)SR3 3rd Party",
        "status": "affected"
      },
      {
        "version": "10.2(1)",
        "status": "affected"
      },
      {
        "version": "12.5(1)",
        "status": "affected"
      },
      {
        "version": "10.3(1)SR2",
        "status": "affected"
      },
      {
        "version": "11-0-1MSR1-1",
        "status": "affected"
      },
      {
        "version": "10.4(1) 3rd Party",
        "status": "affected"
      },
      {
        "version": "12.5(1)SR1",
        "status": "affected"
      },
      {
        "version": "11.5(1)SR1",
        "status": "affected"
      },
      {
        "version": "10.1(1)SR2",
        "status": "affected"
      },
      {
        "version": "12.0(1)SR2",
        "status": "affected"
      },
      {
        "version": "12.6(1)",
        "status": "affected"
      },
      {
        "version": "10.3(1.11) 3rd Party",
        "status": "affected"
      },
      {
        "version": "12.0(1)",
        "status": "affected"
      },
      {
        "version": "12.0(1)SR1",
        "status": "affected"
      },
      {
        "version": "9.3(3)",
        "status": "affected"
      },
      {
        "version": "12.5(1)SR3",
        "status": "affected"
      },
      {
        "version": "10.3(1)SR4b",
        "status": "affected"
      },
      {
        "version": "9.3(4)SR1 3rd Party",
        "status": "affected"
      },
      {
        "version": "10.3(1)SR5",
        "status": "affected"
      },
      {
        "version": "10.1(1.9)",
        "status": "affected"
      },
      {
        "version": "10.3(1.9) 3rd Party",
        "status": "affected"
      },
      {
        "version": "9.3(4)SR2 3rd Party",
        "status": "affected"
      },
      {
        "version": "10.3(1)SR1",
        "status": "affected"
      },
      {
        "version": "10.3(1)SR3",
        "status": "affected"
      },
      {
        "version": "10.1(1)SR1",
        "status": "affected"
      },
      {
        "version": "12.0(1)SR3",
        "status": "affected"
      },
      {
        "version": "12.6(1)SR1",
        "status": "affected"
      },
      {
        "version": "12.7(1)",
        "status": "affected"
      },
      {
        "version": "10.3(1)SR6",
        "status": "affected"
      },
      {
        "version": "12.8(1)",
        "status": "affected"
      },
      {
        "version": "12.7(1)SR1",
        "status": "affected"
      },
      {
        "version": "12.8(1)SR1",
        "status": "affected"
      },
      {
        "version": "12.8(1)SR2",
        "status": "affected"
      },
      {
        "version": "14.0(1)",
        "status": "affected"
      },
      {
        "version": "14.0(1)SR1",
        "status": "affected"
      },
      {
        "version": "10.3(1)SR7",
        "status": "affected"
      },
      {
        "version": "14.0(1)SR2",
        "status": "affected"
      },
      {
        "version": "14.1(1)",
        "status": "affected"
      },
      {
        "version": "14.0(1)SR3",
        "status": "affected"
      },
      {
        "version": "14.1(1)SR1",
        "status": "affected"
      },
      {
        "version": "14.1(1)SR2",
        "status": "affected"
      },
      {
        "version": "14.2(1)",
        "status": "affected"
      },
      {
        "version": "14.2(1)SR1",
        "status": "affected"
      },
      {
        "version": "14.1(1)SR3",
        "status": "affected"
      },
      {
        "version": "14.2(1)SR2",
        "status": "affected"
      },
      {
        "version": "3.1(1)",
        "status": "affected"
      },
      {
        "version": "3.0(1)",
        "status": "affected"
      },
      {
        "version": "14.2(1)SR3",
        "status": "affected"
      },
      {
        "version": "3.1(1)SR1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-infodisc-sbyqQVbG

05 Jan 2026 14:57Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.3

EPSS0.00896

SSVC

CWE-200