5.9

CVE-2024-20357

A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device.  

 This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ip Phone 6871 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6871 Version-
Cisco ≫ Ip Phone 7811 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7811 Version-
Cisco ≫ Ip Phone 7821 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7821 Version-
Cisco ≫ Ip Phone 7832 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7832 Version-
Cisco ≫ Ip Phone 7841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7841 Version-
Cisco ≫ Ip Phone 7861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7861 Version-
Cisco ≫ Ip Phone 8811 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8811 Version-
Cisco ≫ Ip Phone 8832 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8832 Version-
Cisco ≫ Ip Phone 8841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8841 Version-
Cisco ≫ Ip Phone 8845 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8845 Version-
Cisco ≫ Ip Phone 8851 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8851 Version-
Cisco ≫ Ip Phone 8861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8861 Version-
Cisco ≫ Ip Phone 8865 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8865 Version-
Cisco ≫ Video Phone 8875 Firmware Version < 2.3.1.0101
   Cisco ≫ Video Phone 8875 Version-
Cisco ≫ Ip Phone 6821 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6821 Version-
Cisco ≫ Ip Phone 6841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6841 Version-
Cisco ≫ Ip Phone 6851 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6851 Version-
Cisco ≫ Ip Phone 6861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6861 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.74% 0.723
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@cisco.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.