Cisco IP Phone Harbors Critical RCE Flaw

🗓️ 16 Apr 2020 18:49:27Reported by Lindsey O'DonnellType

threatpost🔗 threatpost.com👁 437 Views

Cisco warns of critical RCE flaw in its IP phones, allowing attackers to execute code remotel

Reporter	Title	Published	Views	Family All 386
0daydb	Cisco UCS Director Cloupia Script - Remote Code Execution	7 Jun 202012:52	–	0daydb
zdt	Cisco IP Phone 11.7 - Denial of service Vulnerability	18 Apr 202000:00	–	zdt
zdt	Cisco UCS Director Cloupia Script Remote Code Execution Exploit	8 Jun 202000:00	–	zdt
zdt	Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit	24 Mar 202100:00	–	zdt
ATTACKERKB	CVE-2020-5135	12 Oct 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-3161	15 Apr 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-24407	15 Oct 202023:00	–	attackerkb
Information Security Automation	Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee	28 Jun 202110:59	–	avleonov
BDU FSTEC	The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC) Supervisor, as well as in tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, allows attackers to compromise the integrity of protected information.	19 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the configuration for connecting microprogramming software-based Cisco IP phones to web servers allows a perpetrator to execute arbitrary code or cause a service failure.	29 May 202000:00	–	bdu_fstec

Source	Link
github	www.github.com/tenable/poc/blob/master/cisco/ip_phone/cve_2020_3161.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3161
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs
tenable	www.tenable.com/security/research/tra-2020-24
threatpost	www.threatpost.com/newsletter-sign/
cisco	www.cisco.com/c/en/us/products/collaboration-endpoints/wireless-ip-phone-8821/index.html
threatpost	www.threatpost.com/cyberattacks-healthcare-orgs-coronavirus-frontlines/154768/
media	www.media.threatpost.com/wp-content/uploads/sites/103/2020/04/16132716/cisco-critical-flaw-1.png
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs
cvedetails	www.cvedetails.com/cve/CVE-2016-1421/

16 Apr 2020 18:49Current

0.3Low risk

Vulners AI Score0.3

EPSS0.88374