First published: Wed May 01 2024(Updated: )
Multiple vulnerabilities in Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition, gain unauthorized access, or view sensitive information on an affected system.For more information about these vulnerabilities, see the
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IP Phone 6800 Series | ||
Cisco IP Phone 7800 Series Firmware | ||
Cisco IP Phone 8800 Series Software |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The cisco-sa-ipphone-multi-vulns-cXAhCvS advisory details vulnerabilities that could allow denial of service, unauthorized access, or exposure of sensitive information on Cisco IP Phones.
The affected models include Cisco IP Phone 6800 Series, 7800 Series, and 8800 Series.
The potential impact includes denial of service conditions and unauthorized access which could compromise system integrity and confidentiality.
To mitigate the vulnerabilities, update the firmware on the affected Cisco IP Phone models to the latest version provided by Cisco.
No, authentication is not required to exploit the vulnerabilities, making them particularly critical.