CVE-2023-20078: Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
First published: Fri Mar 03 2023(Updated: )
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Ip Phone 6871 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 6871 | ||
| Cisco Ip Phone 6861 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 6861 | ||
| Cisco Ip Phone 6851 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 6851 | ||
| Cisco Ip Phone 6841 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 6841 | ||
| Cisco Ip Phone 6825 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 6825 | ||
| Cisco Ip Phone 7861 Firmware | <11.3.7sr1 | |
| Cisco IP Phone 7861 | ||
| Cisco Ip Phone 7841 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 7841 | ||
| Cisco Ip Phone 7832 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 7832 | ||
| Cisco Ip Phone 7821 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 7821 | ||
| Cisco Ip Phone 7811 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 7811 | ||
| Cisco Ip Phone 8865 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 8865 | ||
| Cisco Ip Phone 8861 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 8861 | ||
| Cisco Ip Phone 8851 Firmware | <11.3.7sr1 | |
| Cisco IP Phone 8851 | ||
| Cisco Ip Phone 8845 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 8845 | ||
| Cisco Ip Phone 8841 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 8841 | ||
| Cisco Ip Phone 8832 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 8832 | ||
| Cisco Ip Phone 8811 Firmware | <11.3.7sr1 | |
| Cisco Ip Phone 8811 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What are the vulnerabilities in Cisco IP Phones with CVE-2023-20078?
The vulnerabilities include the ability for an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition.
How severe is the vulnerability with CVE-2023-20078?
The severity of this vulnerability is classified as critical with a CVSS score of 9.8.
Which Cisco IP Phone models are affected by CVE-2023-20078?
The Cisco IP Phone models 6871, 6861, 6851, 6841, 6825, 7861, 7841, 7832, 7821, 7811, 8865, 8861, 8851, 8845, 8841, 8832, and 8811 are affected.
How can an attacker exploit CVE-2023-20078?
An attacker can exploit this vulnerability by targeting the web-based management interface of the affected Cisco IP Phones.
Is there a fix available for CVE-2023-20078?
Yes, Cisco has released a security advisory with mitigation details and software updates to address the vulnerabilities.
- agent/type
- agent/weakness
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/references
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/severity
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco ip phone 6871 firmware
- canonical/cisco ip phone 6871
- canonical/cisco ip phone 6861 firmware
- canonical/cisco ip phone 6861
- canonical/cisco ip phone 6851 firmware
- canonical/cisco ip phone 6851
- canonical/cisco ip phone 6841 firmware
- canonical/cisco ip phone 6841
- canonical/cisco ip phone 6825 firmware
- canonical/cisco ip phone 6825
- canonical/cisco ip phone 7861 firmware
- canonical/cisco ip phone 7861
- canonical/cisco ip phone 7841 firmware
- canonical/cisco ip phone 7841
- canonical/cisco ip phone 7832 firmware
- canonical/cisco ip phone 7832
- canonical/cisco ip phone 7821 firmware
- canonical/cisco ip phone 7821
- canonical/cisco ip phone 7811 firmware
- canonical/cisco ip phone 7811
- canonical/cisco ip phone 8865 firmware
- canonical/cisco ip phone 8865
- canonical/cisco ip phone 8861 firmware
- canonical/cisco ip phone 8861
- canonical/cisco ip phone 8851 firmware
- canonical/cisco ip phone 8851
- canonical/cisco ip phone 8845 firmware
- canonical/cisco ip phone 8845
- canonical/cisco ip phone 8841 firmware
- canonical/cisco ip phone 8841
- canonical/cisco ip phone 8832 firmware
- canonical/cisco ip phone 8832
- canonical/cisco ip phone 8811 firmware
- canonical/cisco ip phone 8811