← Database

CVE-2023-20079

CRITICAL CVSS: 9.8 Published: 2023-03-03 Modified: 2026-06-17

Description

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

Affected Platforms

Cisco Unified Ip Phone 7975G FirmwareCisco Ip Phone 7832 FirmwareCisco Ip Phone 7832Cisco Ip Phone 8851Cisco Ip Phone 8865 FirmwareCisco Ip Phone 7811 FirmwareCisco Ip Phone 6841Cisco Ip Phone 8865Cisco Ip Phone 6825Cisco Ip Phone 8845 Firmware

Weakness Type

CWE-121, CWE-787

References