5.3
CVSSv3

CVE-2020-3360

Published: 18/06/2020 Updated: 06/08/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote malicious user to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management interface of an affected device. An attacker could exploit this vulnerability by sending malicious requests to the device, which could allow the malicious user to bypass access restrictions. A successful attack could allow the malicious user to view sensitive information, including device call logs that contain names, usernames, and phone numbers of users of the device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco unified ip phone 6901 firmware

cisco unified ip phone 6961 firmware

cisco unified ip phone 6945 firmware

cisco unified ip phone 6941 firmware

cisco unified ip phone 6921 firmware

cisco unified ip phone 6911 firmware

cisco unified ip phone 7832 firmware

cisco unified ip phone 7861 firmware

cisco unified ip phone 7841 firmware

cisco unified ip phone 7821 firmware

cisco unified ip phone 7811 firmware

cisco unified ip phone 7937g firmware

cisco unified ip phone 7975g firmware

cisco unified ip phone 7965g firmware

cisco unified ip phone 7962g firmware

cisco unified ip phone 7961g firmware

cisco unified ip phone 7960g firmware

cisco unified ip phone 7945g firmware

cisco unified ip phone 7942g firmware

cisco unified ip phone 7941g firmware

cisco unified ip phone 7940g firmware

cisco unified ip phone 7931g firmware

cisco unified ip phone 7911g firmware

cisco unified ip phone 7906g firmware

cisco unified ip phone 8811 firmware

cisco unified ip phone 8841 firmware

cisco unified ip phone 8845 firmware

cisco unified ip phone 8851 firmware

cisco unified ip phone 8851nr firmware

cisco unified ip phone 8861 firmware

cisco unified ip phone 8865 firmware

cisco unified ip phone 8865nr firmware

cisco unified ip phone 8961 firmware

cisco unified ip phone 8945 firmware

cisco unified ip phone 8941 firmware

cisco unified ip phone 9971 firmware

cisco unified ip phone 9951 firmware

Vendor Advisories

A vulnerability in the Web Access feature of Cisco IP Phones could allow an unauthenticated, remote attacker to view sensitive information on an affected device The vulnerability is due to improper access controls on the web-based management interface of an affected device An attacker could exploit this vulnerability by sending malicious requests ...