CVE-2022-20774: Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability
First published: Wed Apr 06 2022(Updated: )
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based interface of an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform configuration changes on the affected device, resulting in a denial of service (DoS) condition.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Ip Phone 6871 Firmware | <11.3.5 | |
| Cisco Ip Phone 6871 | ||
| Cisco Ip Phone 6861 Firmware | <11.3.5 | |
| Cisco Ip Phone 6861 | ||
| Cisco Ip Phone 6851 Firmware | <11.3.5 | |
| Cisco Ip Phone 6851 | ||
| Cisco Ip Phone 6841 Firmware | <11.3.5 | |
| Cisco Ip Phone 6841 | ||
| Cisco Ip Phone 6825 Firmware | <11.3.5 | |
| Cisco Ip Phone 6825 | ||
| Cisco Ip Phone 7861 Firmware | <11.3.5 | |
| Cisco IP Phone 7861 | ||
| Cisco Ip Phone 7841 Firmware | <11.3.5 | |
| Cisco Ip Phone 7841 | ||
| Cisco Ip Phone 7832 Firmware | <11.3.5 | |
| Cisco Ip Phone 7832 | ||
| Cisco Ip Phone 7821 Firmware | <11.3.5 | |
| Cisco Ip Phone 7821 | ||
| Cisco Ip Phone 7811 Firmware | <11.3.5 | |
| Cisco Ip Phone 7811 | ||
| Cisco Ip Phone 8865 Firmware | <11.3.5 | |
| Cisco Ip Phone 8865 | ||
| Cisco Ip Phone 8861 Firmware | <11.3.5 | |
| Cisco Ip Phone 8861 | ||
| Cisco Ip Phone 8851 Firmware | <11.3.5 | |
| Cisco IP Phone 8851 | ||
| Cisco Ip Phone 8845 Firmware | <11.3.5 | |
| Cisco Ip Phone 8845 | ||
| Cisco Ip Phone 8841 Firmware | <11.3.5 | |
| Cisco Ip Phone 8841 | ||
| Cisco Ip Phone 8832 Firmware | <11.3.5 | |
| Cisco Ip Phone 8832 | ||
| Cisco Ip Phone 8811 Firmware | <11.3.5 | |
| Cisco Ip Phone 8811 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20774?
CVE-2022-20774 is a vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware that allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based interface.
How does CVE-2022-20774 affect Cisco IP Phone 6800, 7800, and 8800 Series?
CVE-2022-20774 affects Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware by allowing an unauthenticated, remote attacker to conduct a CSRF attack through the web-based management interface.
What is the severity of CVE-2022-20774?
CVE-2022-20774 has a severity rating of 8.1 (High).
How can I fix CVE-2022-20774?
To mitigate CVE-2022-20774, Cisco recommends upgrading to a fixed software version as specified in the security advisory.
Where can I find more information about CVE-2022-20774?
You can find more information about CVE-2022-20774 in the Cisco Security Advisory at the provided link.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/references
- agent/weakness
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco ip phone 6871 firmware
- canonical/cisco ip phone 6871
- canonical/cisco ip phone 6861 firmware
- canonical/cisco ip phone 6861
- canonical/cisco ip phone 6851 firmware
- canonical/cisco ip phone 6851
- canonical/cisco ip phone 6841 firmware
- canonical/cisco ip phone 6841
- canonical/cisco ip phone 6825 firmware
- canonical/cisco ip phone 6825
- canonical/cisco ip phone 7861 firmware
- canonical/cisco ip phone 7861
- canonical/cisco ip phone 7841 firmware
- canonical/cisco ip phone 7841
- canonical/cisco ip phone 7832 firmware
- canonical/cisco ip phone 7832
- canonical/cisco ip phone 7821 firmware
- canonical/cisco ip phone 7821
- canonical/cisco ip phone 7811 firmware
- canonical/cisco ip phone 7811
- canonical/cisco ip phone 8865 firmware
- canonical/cisco ip phone 8865
- canonical/cisco ip phone 8861 firmware
- canonical/cisco ip phone 8861
- canonical/cisco ip phone 8851 firmware
- canonical/cisco ip phone 8851
- canonical/cisco ip phone 8845 firmware
- canonical/cisco ip phone 8845
- canonical/cisco ip phone 8841 firmware
- canonical/cisco ip phone 8841
- canonical/cisco ip phone 8832 firmware
- canonical/cisco ip phone 8832
- canonical/cisco ip phone 8811 firmware
- canonical/cisco ip phone 8811