CVE-2023-20018

CVE-2023-20018 affects Cisco IP Phone 7800 and 8800 Series through the web-based management interface. The issue is an authentication bypass caused by insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to access parts of the web interface that normally re...

CVE-2018-0325

CVE-2018-0325 affects Cisco IP Phone 7800/8800 series (and 8821) via vulnerable SIP call handling. The SDP parser’s incomplete input validation enables an unauthenticated remote attacker to drop all active calls and restart the SIP process, causing a DoS. Root cause: SDP parameter validation flaw...

CVE-2019-1684

CVE-2019-1684 affects Cisco IP Phone 7800 and 8800 Series. The issue arises from missing length validation in the Cisco Discovery Protocol (CDP) / Link Layer Discovery Protocol (LLDP) header fields, allowing an unauthenticated, adjacent attacker to cause an affected phone to reload and experience...