CVE-2023-20079 — Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities

CVE-2023-20079

Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities PUBLISHED

Description (CNA)

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco IP Phones with Multiplatform Firmware	affected n/a

CWE

CWE-121

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP

ADP enrichment

CVE

No English description supplied.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP

CISA-ADP

No English description supplied.

No references supplied.