Cisco IP Phone Software Arbitrary File Read Vulnerability

A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted input to a debug she...

The vulnerability of the TrustZone microprogramming technology implementation in Cisco IP Phone series 8800 allows a intruder to execute arbitrary code.

The vulnerability of the TrustZone microprogramming system implementation in Cisco IP Phone series 8800 devices is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2021-33478

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...

Code injection

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...

CVE-2021-33478

The CVE-2021-33478 issue concerns the TrustZone implementation in Broadcom MediaxChange firmware, affecting Cisco IP Phone and Wireless IP Phone devices. The vulnerability allows an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone TEE, with explo...

CVE-2021-33478

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...

Unauthorized Access Vulnerability in Cisco IP Phone CP-8845

cisco generally refers to Cisco. Cisco is a leading global provider of networking solutions. An unauthorized access vulnerability exists in Cisco IP Phone CP-8845, which can be exploited by an attacker to gain unauthorized access to sensitive information and perform unauthorized operations, among...

Unauthorized Access Vulnerability in Cisco IP Phone CP-9971

Cisco Systems China Networking Technology Co., Ltd., scope of business: research and development of computer network systems and communication systems; provision of computer network systems, communication systems, installation, technical consulting and so on. An unauthorized access vulnerability...

Unauthorized Access Vulnerability in Cisco IP Phone CP-8861

The Cisco IP Phone CP-8861 is an enterprise-class IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-8861, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Cisco IP Phone CP-7911G

The Cisco IP Phone CP-7911G is an IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-7911G, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Cisco IP Phone CP-8841

The Cisco IP Phone CP-8841 is an enterprise-class IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-8841, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Cisco IP Phone CP-7970G

The Cisco IP Phone CP-7970G is an IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-7970G, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Cisco IP Phone CP-8851

The Cisco IP Phone CP-8851 is an enterprise-class IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-8851, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Cisco IP Phone CP-8865

The Cisco IP Phone CP-8865 is an enterprise-class IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-8865. An attacker could exploit the vulnerability to obtain sensitive information...

Grandstream GRP261x VoIP phone running firmware license issue vulnerability

The Grandstream GRP261x VoIP phone is an IP phone from Grandstream USA. A carrier-grade IP phone designed for large-scale deployments. A security vulnerability exists in the Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 that allows authentication bypass in its administration web...

CVE-2020-24285

INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx...

Information disclosure

INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx...

Intelbras TIP 200 信息泄露漏洞

Intelbras TIP 200 is an IP phone product from Intelbras, Brazil. The device is an IP terminal that supports up to two SIP accounts and has features such as high voice quality HD Voice, LCD 2x15, and power PoE Power over Ethernet. An information disclosure vulnerability exists in INTELBRAS TELEFON...

PT-2021-2256

Name of the Vulnerable Software and Affected Versions: Cisco IP Phone Series 68xx/78xx/88xx affected versions not specified Description: The issue is related to multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations. These vulnerabilities...

Weak password vulnerability in HUAWEI IP PHONE 7960 and HUAWEI IP ESPACE 7910

The HUAWEI IP PHONE 7960 and HUAWEI IP ESPACE 7910 are feature-rich, easy-to-use IP Phones. A weak password vulnerability exists in the HUAWEI IP PHONE 7960 and HUAWEI IP ESPACE 7910, which can be exploited by an attacker to obtain sensitive information...