CVE-2024-20378

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpoints of the web-based management...

CVE-2024-20378

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpoints of the web-based management...

CVE-2024-20357

Cisco CVE-2024-20357 affects multiple Cisco IP Phone series (6800/7800/8800, and related firmware) where XML request parsing lacks proper bounds checking. An unauthenticated, remote attacker could craft XML to trigger calls or play sounds on the device. Root cause is improper bounds-checking duri...

CVE-2024-20357

A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by...

CVE-2024-20357

A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by...

Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Vulnerabilities

Multiple vulnerabilities in Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause a denial of service DoS condition, gain unauthorized access, or view sensitive information on an affected system. For more information about these vulnerabilities, see the Details "details...

PT-2024-3515

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 6800 versions affected versions not specified Cisco IP Phone 7800 versions affected versions not specified Cisco IP Phone 8800 versions affected versions not specified Cisco Video Phone 8875 versions affected versions not...

PT-2024-3514

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 6800 versions affected versions not specified Cisco IP Phone 7800 versions affected versions not specified Cisco IP Phone 8800 versions affected versions not specified Cisco Video Phone 8875 versions affected versions not...

Cisco IP Phone 安全漏洞

Cisco IP Phone is a hardware device from the American company Cisco Cisco, which provides the call function of the IP phone. The Cisco IP Phone suffers from a denial of service vulnerability that stems from insufficient validation of user-supplied input, which can be exploited by an...

Cisco IP Phone 安全漏洞

The Cisco IP Phone is a hardware device from the American company Cisco, Inc. IP Phone that provides calling capabilities. A security vulnerability exists in the Cisco IP Phone that stems from a lack of authentication to a specific endpoint, which could allow an unauthenticated remote attacker to...

CVE-2024-28066

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...

CVE-2024-28066

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...

Unify CP IP Phone 安全漏洞

Unify CP IP Phone is a phone from Unify Germany. A security vulnerability exists in Unify CP IP Phone version 1.10.4.3, which stems from the use of weak credentials...

CVE-2024-28066

CVE-2024-28066 affects Unify CP IP Phone firmware 1.10.4.3. The root cause is a hardcoded root password enabling weak credentials, rated CVSSv3.1: 8.8 (HIGH) with Adjacent access, no user interaction required. The Red Hat/NVD/CVE entries corroborate the issue; exploitation status is not documente...

PT-2024-22247 · Unify · Unify Cp Ip Phone

Name of the Vulnerable Software and Affected Versions: Unify CP IP Phone version 1.10.4.3 Description: The issue is related to weak credentials, specifically a hardcoded root password, in the firmware. Recommendations: For Unify CP IP Phone version 1.10.4.3, consider changing the hardcoded root...

CVE-2024-28066

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...

CVE-2024-28066

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...

CVE-2024-28065

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash...

CVE-2024-28065

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash...

CVE-2024-28065

CVE-2024-28065 affects Unify CP IP Phone firmware 1.10.4.3. The issue arises because files are not encrypted and contain sensitive data such as the root password hash. CVSS 3.1 vector: AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N, base score 5.9 (Medium). Exploitation status is not provided in the documen...