7.5

CVE-2024-20376

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.  

 This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Video Phone 8875 Firmware Version < 2.3.1.0101
   Cisco ≫ Video Phone 8875 Version-
Cisco ≫ Ip Phone 6821 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6821 Version-
Cisco ≫ Ip Phone 6841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6841 Version-
Cisco ≫ Ip Phone 6851 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6851 Version-
Cisco ≫ Ip Phone 6861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6861 Version-
Cisco ≫ Ip Phone 6871 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6871 Version-
Cisco ≫ Ip Phone 7811 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7811 Version-
Cisco ≫ Ip Phone 7821 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7821 Version-
Cisco ≫ Ip Phone 7832 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7832 Version-
Cisco ≫ Ip Phone 7841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7841 Version-
Cisco ≫ Ip Phone 7861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7861 Version-
Cisco ≫ Ip Phone 8811 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8811 Version-
Cisco ≫ Ip Phone 8832 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8832 Version-
Cisco ≫ Ip Phone 8841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8841 Version-
Cisco ≫ Ip Phone 8845 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8845 Version-
Cisco ≫ Ip Phone 8851 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8851 Version-
Cisco ≫ Ip Phone 8861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8861 Version-
Cisco ≫ Ip Phone 8865 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8865 Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.62% 0.698
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@cisco.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.