Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ip phone multiplatform firmware vulnerabilities and exploits

(subscribe to this query)
437
VMScore
CVE-2022-20774
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack against a user of the web-based interface of...
Cisco Ip Phone 6871 FirmwareCisco Ip Phone 6861 FirmwareCisco Ip Phone 6851 FirmwareCisco Ip Phone 6841 FirmwareCisco Ip Phone 6825 FirmwareCisco Ip Phone 7861 FirmwareCisco Ip Phone 7841 FirmwareCisco Ip Phone 7832 FirmwareCisco Ip Phone 7821 FirmwareCisco Ip Phone 7811 FirmwareCisco Ip Phone 8865 FirmwareCisco Ip Phone 8861 FirmwareCisco Ip Phone 8851 FirmwareCisco Ip Phone 8845 FirmwareCisco Ip Phone 8841 FirmwareCisco Ip Phone 8832 FirmwareCisco Ip Phone 8811 Firmware
312
VMScore
CVE-2019-16008
A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. The v...
Cisco Ip Phone 6841 FirmwareCisco Ip Phone 6851 FirmwareCisco Ip Phone 6825 FirmwareCisco Ip Phone 6861 FirmwareCisco Ip Phone 6871 FirmwareCisco Ip Phone 6821 FirmwareCisco Ip Phone 7811 FirmwareCisco Ip Phone 7821 FirmwareCisco Ip Phone 7832 FirmwareCisco Ip Phone 7841 FirmwareCisco Ip Phone 7861 FirmwareCisco Ip Phone 8811 FirmwareCisco Ip Phone 8831 FirmwareCisco Ip Phone 8832 FirmwareCisco Ip Phone 8841 FirmwareCisco Ip Phone 8845 FirmwareCisco Ip Phone 8851 FirmwareCisco Ip Phone 8861 FirmwareCisco Ip Phone 8865 Firmware
NA
CVE-2023-20221
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management i...
Cisco Video Phone 8875 FirmwareCisco Ip Phone 6821 With Multiplatform Firmware 11-3-1mppsr4upgCisco Ip Phone 6821 With Multiplatform Firmware 11-3-1msr2upgCisco Ip Phone 6821 With Multiplatform Firmware 11.0.0Cisco Ip Phone 6821 With Multiplatform Firmware 11.0.1Cisco Ip Phone 6821 With Multiplatform Firmware 11.0.1 Msr1-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.0.2Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.1Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.1 Msr1-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.1 Msr2-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.2Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.2 Msr1-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.1.2 Msr3-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.1Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.2Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.3Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.3 Msr1-1Cisco Ip Phone 6821 With Multiplatform Firmware 11.2.4Cisco Ip Phone 6821 With Multiplatform Firmware 11.3.1Cisco Ip Phone 6821 With Multiplatform Firmware 11.3.1 Msr1-3Cisco Ip Phone 6821 With Multiplatform Firmware 11.3.1 Msr2-6Cisco Ip Phone 6821 With Multiplatform Firmware 11.3.1 Msr3-3
516
VMScore
CVE-2021-3450
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...
Openssl OpensslFreebsd Freebsd 12.2Netapp Santricity Smi-s Provider Firmware -Netapp Storagegrid Firmware -Windriver Linux -Windriver Linux 18.0Windriver Linux 19.0Windriver Linux 17.0Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Ontap Select Deploy Administration Utility -Netapp Cloud Volumes Ontap Mediator -Fedoraproject Fedora 34Tenable Nessus AgentTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Oracle Jd Edwards World Security A9.4Oracle Weblogic Server 12.2.1.4.0
740
VMScore
CVE-2020-25682
A flaw was found in dnsmasq prior to 2.83. A buffer overflow vulnerability exists in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
633
VMScore
CVE-2020-25683
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocat...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
384
VMScore
CVE-2020-25684
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Arista Eos
384
VMScore
CVE-2020-25685
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
384
VMScore
CVE-2020-25686
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
632
VMScore
CVE-2020-25687
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook