CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
Percentile
30.2%
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system.
This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | video_phone_8875_firmware | * | cpe:2.3:o:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:* |
cisco | video_phone_8875 | - | cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:* |
cisco | ip_phone_6821_with_multiplatform_firmware | 11-3-1mppsr4upg | cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11-3-1mppsr4upg:*:*:*:*:*:*:* |
cisco | ip_phone_6821_with_multiplatform_firmware | 11-3-1msr2upg | cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11-3-1msr2upg:*:*:*:*:*:*:* |
cisco | ip_phone_6821_with_multiplatform_firmware | 11.0.0 | cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.0.0:*:*:*:*:*:*:* |
cisco | ip_phone_6821_with_multiplatform_firmware | 11.0.1 | cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.0.1:*:*:*:*:*:*:* |
cisco | ip_phone_6821_with_multiplatform_firmware | 11.0.1_msr1-1 | cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.0.1_msr1-1:*:*:*:*:*:*:* |
cisco | ip_phone_6821_with_multiplatform_firmware | 11.0.2 | cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.0.2:*:*:*:*:*:*:* |
cisco | ip_phone_6821_with_multiplatform_firmware | 11.1.1 | cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.1.1:*:*:*:*:*:*:* |
cisco | ip_phone_6821_with_multiplatform_firmware | 11.1.1_msr1-1 | cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:11.1.1_msr1-1:*:*:*:*:*:*:* |