PT-2023-1536

🗓️ 01 Mar 2023 00:00:00Reported by Positive TechnologiesType

Cisco IP Phone web interface command injection risks remote code execution or denial of service; patch 6800, 7800, 7900, 8800.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2023-20078	2 Mar 202300:00	–	attackerkb
BDU FSTEC	The vulnerability in the web interface of the microprogramming software for Cisco IP Phones 6800, 7800, and 8800 exists due to the possibility of inserting commands that allow a perpetrator to execute arbitrary code with root privileges.	6 Mar 202300:00	–	bdu_fstec
Circl	CVE-2023-20078	2 Mar 202304:00	–	circl
Cisco	Cisco IP Phone 6800, 7800, and 8800 Series Web UI Vulnerabilities	1 Mar 202316:00	–	cisco
Tenable Nessus	Cisco IP Phones < 11.3.7SR1 Multiple Vulnerabilities (cisco-sa-ip-phone-cmd-inj-KMFynVcP)	9 Mar 202300:00	–	nessus
Tenable Nessus	Cisco IP Phones Web-based Management Interface Stack-based Buffer Overflow (CVE-2023-20078)	18 Mar 202400:00	–	nessus
CNNVD	Cisco IP Phone 缓冲区错误漏洞	3 Mar 202300:00	–	cnnvd
CVE	CVE-2023-20078	3 Mar 202300:00	–	cve
Cvelist	CVE-2023-20078 Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities	3 Mar 202300:00	–	cvelist
NCSC	Vulnerabilities fixed in Cisco IP Phones	2 Mar 202300:00	–	ncsc

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP
bdu	www.bdu.fstec.ru/vul/2023-00980
t	www.t.me/true_secator/4123
t	www.t.me/pentestingnews/33605
twitter	www.twitter.com/Komodosec/status/2010744381519880414
t	www.t.me/thehackernews/3107
t	www.t.me/cibsecurity/59382
t	www.t.me/isacarusec/5940
twitter	www.twitter.com/ytroncal/status/1997256211444421053
t	www.t.me/cvenotify/45448

12 Jan 2026 00:00Current

9.9High risk

Vulners AI Score9.9

CVSS 210

CVSS 3.19.8

EPSS0.10351

SSVC