CVE-2023-20078

🗓️ 03 Mar 2023 16:15:10Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 25 Views

Cisco IP Phones web management interface vulnerabilities

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2023-20078	2 Mar 202300:00	–	attackerkb
BDU FSTEC	The vulnerability in the web interface of the microprogramming software for Cisco IP Phones 6800, 7800, and 8800 exists due to the possibility of inserting commands that allow a perpetrator to execute arbitrary code with root privileges.	6 Mar 202300:00	–	bdu_fstec
Circl	CVE-2023-20078	2 Mar 202304:00	–	circl
Cisco	Cisco IP Phone 6800, 7800, and 8800 Series Web UI Vulnerabilities	1 Mar 202316:00	–	cisco
Tenable Nessus	Cisco IP Phones < 11.3.7SR1 Multiple Vulnerabilities (cisco-sa-ip-phone-cmd-inj-KMFynVcP)	9 Mar 202300:00	–	nessus
Tenable Nessus	Cisco IP Phones Web-based Management Interface Stack-based Buffer Overflow (CVE-2023-20078)	18 Mar 202400:00	–	nessus
CNNVD	Cisco IP Phone 缓冲区错误漏洞	3 Mar 202300:00	–	cnnvd
CVE	CVE-2023-20078	3 Mar 202300:00	–	cve
Cvelist	CVE-2023-20078 Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities	3 Mar 202300:00	–	cvelist
NCSC	Vulnerabilities fixed in Cisco IP Phones	2 Mar 202300:00	–	ncsc

NVD

Node

cisco ip_phone_6871_firmwareRange<11.3.7sr1

AND

cisco ip_phone_6871Match-

Node

cisco ip_phone_6861_firmwareRange<11.3.7sr1

AND

cisco ip_phone_6861Match-

Node

cisco ip_phone_6851_firmwareRange<11.3.7sr1

AND

cisco ip_phone_6851Match-

Node

cisco ip_phone_6841_firmwareRange<11.3.7sr1

AND

cisco ip_phone_6841Match-

Node

cisco ip_phone_6825_firmwareRange<11.3.7sr1

AND

cisco ip_phone_6825Match-

Node

cisco ip_phone_7861_firmwareRange<11.3.7sr1

AND

cisco ip_phone_7861Match-

Node

cisco ip_phone_7841_firmwareRange<11.3.7sr1

AND

cisco ip_phone_7841Match-

Node

cisco ip_phone_7832_firmwareRange<11.3.7sr1

AND

cisco ip_phone_7832Match-

Node

cisco ip_phone_7821_firmwareRange<11.3.7sr1

AND

cisco ip_phone_7821Match-

Node

cisco ip_phone_7811_firmwareRange<11.3.7sr1

AND

cisco ip_phone_7811Match-

Node

cisco ip_phone_8865_firmwareRange<11.3.7sr1

AND

cisco ip_phone_8865Match-

Node

cisco ip_phone_8861_firmwareRange<11.3.7sr1

AND

cisco ip_phone_8861Match-

Node

cisco ip_phone_8851_firmwareRange<11.3.7sr1

AND

cisco ip_phone_8851Match-

Node

cisco ip_phone_8845_firmwareRange<11.3.7sr1

AND

cisco ip_phone_8845Match-

Node

cisco ip_phone_8841_firmwareRange<11.3.7sr1

AND

cisco ip_phone_8841Match-

Node

cisco ip_phone_8832_firmwareRange<11.3.7sr1

AND

cisco ip_phone_8832Match-

Node

cisco ip_phone_8811_firmwareRange<11.3.7sr1

AND

cisco ip_phone_8811Match-

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP

21 Nov 2024 07:40Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

EPSS0.10351

CWE-787 CWE-121

cisco ip phones web-based management vulnerabilities remote attacker arbitrary code denial of service advisory