Priority LOW 33
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS att…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00287 · Published 2025-10-15 · No fix listed CWE-79
Priority LOW 39
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS con…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00478 · Published 2025-10-15 · No fix listed CWE-121
Priority LOW 30
A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to write arbitrary files on an…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00353 · Published 2025-09-03 · No fix listed CWE-284
Priority LOW 39
A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive informatio…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00387 · Published 2025-09-03 · No fix listed CWE-200
Priority LOW 29
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to ex…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00328 · Published 2024-11-18 · No fix listed CWE-120
Priority LOW 30
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affecte…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00441 · Published 2024-11-06 · No fix listed CWE-200
Priority MEDIUM 61
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.10314 · Published 2023-03-03 · No fix listed CWE-121
Priority MEDIUM 61
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.10351 · Published 2023-03-03 · No fix listed CWE-121
Priority LOW 38
A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0063 · Published 2023-01-19 · No fix listed CWE-288
Priority MEDIUM 47
A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.06355 · Published 2022-12-08 · No fix listed CWE-787
Priority LOW 35
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSR…
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00399 · Published 2022-04-06 · No fix listed CWE-345
Priority LOW 21
A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00363 · Published 2022-01-14 · No fix listed CWE-312
Priority LOW 24
A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00266 · Published 2021-10-06 · No fix listed CWE-36
Priority CRITICAL 100KEV
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS)…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.83855 · Published 2020-04-15 · No fix listed CWE-20
Priority MEDIUM 46
A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP ph…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.03095 · Published 2020-02-05 · Fixed in 12.7(1) CWE-20
Priority LOW 25
A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user o…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00633 · Published 2020-01-26 · No fix listed CWE-79
Priority LOW 36
A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01317 · Published 2019-07-06 · Fixed in 12.0(1)MN130 CWE-476
Priority MEDIUM 43
A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone t…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01967 · Published 2019-05-03 · Fixed in 11.0(5), 12.5(1) CWE-399
Priority LOW 30
A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected ph…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.0064 · Published 2019-02-21 · Fixed in 12.6(1)MN80 CWE-399