A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP ph…
CVSS 3.1HIGH 8.8·Adjacent network·No auth·No interaction·EPSS 0.03095·Published 2020-02-05·Fixed in 12.7(1)CWE-20
A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone t…
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01967·Published 2019-05-03·Fixed in 11.0(5), 12.5(1)CWE-399
A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone.
CVSS 3.0HIGH 7.5·Network·No auth·No interaction·EPSS 0.01317·Published 2019-07-06·Fixed in 12.0(1)MN130CWE-476
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affecte…
A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected ph…
CVSS 3.1MEDIUM 6.5·Adjacent network·No auth·No interaction·EPSS 0.0064·Published 2019-02-21·Fixed in 12.6(1)MN80CWE-399
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to ex…
A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device.