← Database

CVE-2023-20078

CRITICAL CVSS: 9.8 Published: 2023-03-03 Modified: 2026-06-17

Description

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

Affected Platforms

Cisco Ip Phone 7832 FirmwareCisco Ip Phone 7832Cisco Ip Phone 8851Cisco Ip Phone 8865 FirmwareCisco Ip Phone 7811 FirmwareCisco Ip Phone 6841Cisco Ip Phone 8865Cisco Ip Phone 6825Cisco Ip Phone 8845 FirmwareCisco Ip Phone 6825 Firmware

Weakness Type

CWE-121, CWE-787

References