Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Priority LOW 29

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to ex…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00328 Published 2024-11-18 No fix listed CWE-120
Priority LOW 30

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affecte…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00441 Published 2024-11-06 No fix listed CWE-200
Priority LOW 21

A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00363 Published 2022-01-14 No fix listed CWE-312
Priority LOW 24

A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00266 Published 2021-10-06 No fix listed CWE-36
Priority MEDIUM 46

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP ph…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03095 Published 2020-02-05 Fixed in 12.7(1) CWE-20
Priority MEDIUM 43

A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone t…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01967 Published 2019-05-03 Fixed in 11.0(5), 12.5(1) CWE-399
Priority MEDIUM 43

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to bypass authorization, access critical…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01939 Published 2019-03-22 Fixed in 11.0(5), 12.5(1)SR1 CWE-284
Priority LOW 39

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00698 Published 2019-03-22 Fixed in 11.0(5), 12.5(1)SR1 CWE-352
Priority LOW 38

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01366 Published 2019-03-22 Fixed in 11.0(5), 12.5(1)SR1 CWE-22
Priority LOW 30

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected ph…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0064 Published 2019-02-21 Fixed in 12.6(1)MN80 CWE-399