Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ip phone 7800 firmware vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-20968
A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent malicious user to cause a stack overflow on an affected device. This vulnerability is due to insufficient input validation o...
Cisco Ip Phone 7811 Firmware 9.3\\(3\\)Cisco Ip Phone 7811 Firmware 9.3\\(4\\)Cisco Ip Phone 7811 Firmware 9.3\\(4\\)sr1Cisco Ip Phone 7811 Firmware 9.3\\(4\\)sr2Cisco Ip Phone 7811 Firmware 9.3\\(4\\)sr3Cisco Ip Phone 7811 Firmware 10.1\\(1\\)sr1Cisco Ip Phone 7811 Firmware 10.1\\(1\\)sr2Cisco Ip Phone 7811 Firmware 10.1\\(1.9\\)Cisco Ip Phone 7811 Firmware 10.2\\(1\\)Cisco Ip Phone 7811 Firmware 10.2\\(1\\)sr1Cisco Ip Phone 7811 Firmware 10.2\\(2\\)Cisco Ip Phone 7811 Firmware 10.3\\(1\\)Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr1Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr2Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr3Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr4Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr4bCisco Ip Phone 7811 Firmware 10.3\\(1\\)sr5Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr6Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr7Cisco Ip Phone 7811 Firmware 10.3\\(1.9\\)Cisco Ip Phone 7811 Firmware 10.3\\(1.11\\)
5
CVSSv2
CVE-2020-3360
A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote malicious user to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management int...
Cisco Unified Ip Phone 6901 FirmwareCisco Unified Ip Phone 6961 FirmwareCisco Unified Ip Phone 6945 FirmwareCisco Unified Ip Phone 6941 FirmwareCisco Unified Ip Phone 6921 FirmwareCisco Unified Ip Phone 6911 FirmwareCisco Unified Ip Phone 7832 FirmwareCisco Unified Ip Phone 7861 FirmwareCisco Unified Ip Phone 7841 FirmwareCisco Unified Ip Phone 7821 FirmwareCisco Unified Ip Phone 7811 FirmwareCisco Unified Ip Phone 7937g FirmwareCisco Unified Ip Phone 7975g FirmwareCisco Unified Ip Phone 7965g FirmwareCisco Unified Ip Phone 7962g FirmwareCisco Unified Ip Phone 7961g FirmwareCisco Unified Ip Phone 7960g FirmwareCisco Unified Ip Phone 7945g FirmwareCisco Unified Ip Phone 7942g FirmwareCisco Unified Ip Phone 7941g FirmwareCisco Unified Ip Phone 7940g FirmwareCisco Unified Ip Phone 7931g Firmware
8.3
CVSSv2
CVE-2020-25681
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buff...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
8.3
CVSSv2
CVE-2020-25682
A flaw was found in dnsmasq prior to 2.83. A buffer overflow vulnerability exists in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
7.1
CVSSv2
CVE-2020-25683
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocat...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
4.3
CVSSv2
CVE-2020-25684
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2
CVE-2020-25685
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2
CVE-2020-25686
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
7.1
CVSSv2
CVE-2020-25687
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
5.8
CVSSv2
CVE-2021-3450
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...
Openssl OpensslFreebsd Freebsd 12.2Netapp Santricity Smi-s Provider Firmware -Netapp Storagegrid Firmware -Windriver Linux -Windriver Linux 18.0Windriver Linux 19.0Windriver Linux 17.0Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Ontap Select Deploy Administration Utility -Netapp Cloud Volumes Ontap Mediator -Fedoraproject Fedora 34Tenable Nessus AgentTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Oracle Jd Edwards World Security A9.4Oracle Weblogic Server 12.2.1.4.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook