7.5

CVE-2024-20376

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.  

 This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Video Phone 8875 Firmware Version < 2.3.1.0101
   Cisco ≫ Video Phone 8875 Version-
Cisco ≫ Ip Phone 6821 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6821 Version-
Cisco ≫ Ip Phone 6841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6841 Version-
Cisco ≫ Ip Phone 6851 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6851 Version-
Cisco ≫ Ip Phone 6861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6861 Version-
Cisco ≫ Ip Phone 6871 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 6871 Version-
Cisco ≫ Ip Phone 7811 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7811 Version-
Cisco ≫ Ip Phone 7821 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7821 Version-
Cisco ≫ Ip Phone 7832 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7832 Version-
Cisco ≫ Ip Phone 7841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7841 Version-
Cisco ≫ Ip Phone 7861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 7861 Version-
Cisco ≫ Ip Phone 8811 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8811 Version-
Cisco ≫ Ip Phone 8832 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8832 Version-
Cisco ≫ Ip Phone 8841 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8841 Version-
Cisco ≫ Ip Phone 8845 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8845 Version-
Cisco ≫ Ip Phone 8851 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8851 Version-
Cisco ≫ Ip Phone 8861 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8861 Version-
Cisco ≫ Ip Phone 8865 With Multiplatform Firmware Version <= 12.0.4
   Cisco ≫ Ip Phone 8865 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.64
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@cisco.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.