High WID-SEC-2024-1013 3 CVEs

Cisco IP Phone: Mehrere Schwachstellen

Published May 1, 2024 · Updated May 1, 2024 · de-DE

Vendor: Cisco Product: IP Phone

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco IP Phone ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder um Anrufe zu initiieren oder Töne auf dem Gerät abzuspielen.

Product

Cisco IP Phone ist ein Endgerät für IP-basierte Telefonie.

Vulnerabilities 3

High 7.5

CVE-2024-20376

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote…

Cisco Cisco IP Phones with Multiplatform Firmware Cisco PhoneOS Network devices

May 1, 2024
High 7.5

CVE-2024-20378

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote…

Cisco Cisco IP Phones with Multiplatform Firmware Cisco PhoneOS Network devices

May 1, 2024
Medium 5.9

CVE-2024-20357

A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initia…

Cisco Cisco IP Phones with Multiplatform Firmware Cisco PhoneOS Network devices

May 1, 2024

Revision history

2024-05-01 #1
Initiale Fassung

References

Cisco Security Advisories vom 2024-05-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS