224 matches found
Cisco IP Phone 6800, 7800, 8800 Series Command Injection Vulnerability
Cisco IP Phone 6800, 7800 and 8800 Series are different series of IP phone products from Cisco, USA.Multiplatform Firmware is a set of firewall software that runs on it to support multiple platforms. A command injection vulnerability exists in the Web-based UI of the Cisco IP Phone 6800, 7800, an...
Race condition
A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of...
CVE-2018-0325
A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due t...
Cisco IP Phone 8800 Series and IP Phone 7800 Series Denial of Service Vulnerability
The Cisco IP Phone 7800 Series and the Cisco IP Phone 8800 Series are both different series of telephones from Cisco that offer video and VoIP communication features. A denial of service vulnerability exists in the Session Initiation Protocol SIP call processing feature in the Cisco IP Phone 7800...
8800-0088.com XSS vulnerability
Open Bug Bounty ID: OBB-466896 Description| Value ---|--- Affected Website:| 8800-0088.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
Cisco IP Phone 8800 Series Device Denial of Service Vulnerability
The Cisco IP Phone 8800 Series devices is an IP phone from Cisco that provides video and VoIP communication features.Session Initiation Protocol SIP is a session initiation protocol used in... A denial of service vulnerability exists in the handling of Session Initiation Protocol SIP calls in Cis...
CVE-2017-12328
A vulnerability in Session Initiation Protocol SIP call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the SIP process unexpectedly restarts. All active phone calls are dropped as the SIP process...
Cisco IP Phone 8800 Series Debug Interface Command Injection Vulnerability
The Cisco IP Phone 8800 is a phone product from Cisco that provides video and VoIP communication features. debug interface is one of the debugging interfaces. A command injection vulnerability exists in the debug interface in the Cisco IP Phone 8800 series that stems from the program failing to...
CVE-2017-12305
CVE-2017-12305 concerns Cisco IP Phone 8800 Series, where the debug interface is susceptible to a command injection due to insufficient input validation. The vulnerability enables an authenticated, local attacker to execute arbitrary commands by submitting additional input to the affected debug s...
CVE-2017-6656
Cisco IP Phone 8800 Series SIP DoS (CVE-2017-6656): An unauthenticated, remote attacker can cause the SIP process to restart, dropping all active calls. Vulnerable component: SIP call handling in Cisco IP Phone 8800 devices. Root cause noted as incomplete input validation of SIP headers per Cisco...
Cisco IP Phone 8800 Series Denial of Service Vulnerability
Cisco IP Phone 8800 Series is a telephone product from Cisco USA that provides video and VoIP communication features. A denial of service vulnerability exists in the Session Initiation Protocol SIP call handling in the Cisco IP Phone 8800 Series, which arises from the program's failure to properl...
CVE-2016-8780
Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition...
CVE-2016-8795
Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10,...
CVE-2016-8780
CVE-2016-8780 affects Huawei CloudEngine devices: 6800 (V100R006C00), 7800 (V100R006C00), 8800 (V100R006C00), and 12800 (V100R006C00). The issue allows remote attackers with specific permissions to store massive files, exhausting shared storage and causing a DoS. Root cause is improper management...
Integer Overflow Vulnerability in Some Huawei Switches
Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800 are Huawei's switch devices. An integer overflow vulnerability exists in some of Huawei's switches. Due to the lack of checksums on specific fields in IPFPM messages, an unauthenticated remote attacke...
CVE-2016-1479
Cisco IP Phone 8800 devices with software 11.01 allow remote attackers to cause a denial of service memory corruption via a crafted HTTP request, aka Bug ID CSCuz03038...
CVE-2016-1476
Cross-site scripting XSS vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024...
Cross site scripting
Cross-site scripting XSS vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024...
Memory corruption
Cisco IP Phone 8800 devices with software 11.01 allow remote attackers to cause a denial of service memory corruption via a crafted HTTP request, aka Bug ID CSCuz03038...