Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ip phone 8800 series firmware vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2020-3360
A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote malicious user to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management int...
Cisco Unified Ip Phone 6901 FirmwareCisco Unified Ip Phone 6961 FirmwareCisco Unified Ip Phone 6945 FirmwareCisco Unified Ip Phone 6941 FirmwareCisco Unified Ip Phone 6921 FirmwareCisco Unified Ip Phone 6911 FirmwareCisco Unified Ip Phone 7832 FirmwareCisco Unified Ip Phone 7861 FirmwareCisco Unified Ip Phone 7841 FirmwareCisco Unified Ip Phone 7821 FirmwareCisco Unified Ip Phone 7811 FirmwareCisco Unified Ip Phone 7937g FirmwareCisco Unified Ip Phone 7975g FirmwareCisco Unified Ip Phone 7965g FirmwareCisco Unified Ip Phone 7962g FirmwareCisco Unified Ip Phone 7961g FirmwareCisco Unified Ip Phone 7960g FirmwareCisco Unified Ip Phone 7945g FirmwareCisco Unified Ip Phone 7942g FirmwareCisco Unified Ip Phone 7941g FirmwareCisco Unified Ip Phone 7940g FirmwareCisco Unified Ip Phone 7931g Firmware
NA
CVE-2023-20221
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management i...
Cisco Video Phone 8875 FirmwareCisco Ip Phone 6821 With Multiplatform Firmware 11-3-1mppsr4upgCisco Ip Phone 6821 With Multiplatform Firmware 11-3-1msr2upgCisco Ip Phone 6821 With Multiplatform Firmware 11.0.0Cisco Ip Phone 6821 With Multiplatform Firmware 11.0.1Cisco Ip Phone 6821 With Multiplatform Firmware 11.0.1 Msr1-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.0.2Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.1Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.1 Msr1-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.1 Msr2-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.2Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.2 Msr1-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.2 Msr3-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.1Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.2Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.3Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.3 Msr1-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.4Cisco Ip Phone 6821 With Multiplatform Firmware 11.3.1Cisco Ip Phone 6821 With Multiplatform Firmware 11.3.1 Msr1-3Cisco Ip Phone 6821 With Multiplatform Firmware 11.3.1 Msr2-6Cisco Ip Phone 6821 With Multiplatform Firmware 11.3.1 Msr3-3
5.8
CVSSv2
CVE-2021-3450
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...
Openssl OpensslFreebsd Freebsd 12.2Netapp Santricity Smi-s Provider Firmware -Netapp Storagegrid Firmware -Windriver Linux -Windriver Linux 18.0Windriver Linux 19.0Windriver Linux 17.0Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Ontap Select Deploy Administration Utility -Netapp Cloud Volumes Ontap Mediator -Fedoraproject Fedora 34Tenable Nessus AgentTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Oracle Jd Edwards World Security A9.4Oracle Weblogic Server 12.2.1.4.0
NA
CVE-2022-20968
A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent malicious user to cause a stack overflow on an affected device. This vulnerability is due to insufficient input validation o...
Cisco Ip Phone 7811 Firmware 9.3\\(3\\)Cisco Ip Phone 7811 Firmware 9.3\\(4\\)Cisco Ip Phone 7811 Firmware 9.3\\(4\\)sr1Cisco Ip Phone 7811 Firmware 9.3\\(4\\)sr2Cisco Ip Phone 7811 Firmware 9.3\\(4\\)sr3Cisco Ip Phone 7811 Firmware 10.1\\(1\\)sr1Cisco Ip Phone 7811 Firmware 10.1\\(1\\)sr2Cisco Ip Phone 7811 Firmware 10.1\\(1.9\\)Cisco Ip Phone 7811 Firmware 10.2\\(1\\)Cisco Ip Phone 7811 Firmware 10.2\\(1\\)sr1Cisco Ip Phone 7811 Firmware 10.2\\(2\\)Cisco Ip Phone 7811 Firmware 10.3\\(1\\)Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr1Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr2Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr3Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr4Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr4bCisco Ip Phone 7811 Firmware 10.3\\(1\\)sr5Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr6Cisco Ip Phone 7811 Firmware 10.3\\(1\\)sr7Cisco Ip Phone 7811 Firmware 10.3\\(1.9\\)Cisco Ip Phone 7811 Firmware 10.3\\(1.11\\)
4.3
CVSSv2
CVE-2021-3449
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.2Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Tenable Tenable.scTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineFedoraproject Fedora 34
5
CVSSv2
CVE-2014-3569
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...
Openssl Openssl 1.0.1j
6.8
CVSSv2
CVE-2015-0209
Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL prior to 0.9.8zf, 1.0.0 prior to 1.0.0r, 1.0.1 prior to 1.0.1m, and 1.0.2 prior to 1.0.2a might allow remote malicious users to cause a denial of service (memory corruption and applica...
Openssl Openssl 1.0.1jOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0pOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.0kOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.0Openssl Openssl 1.0.1bOpenssl Openssl 1.0.1e
4.3
CVSSv2
CVE-2015-1788
The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...
Openssl OpensslOpenssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.1Openssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0pOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1d
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook