Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in Cisco IP Phone ausnutzen, um Informationen offenzulegen oder einen Cros-Site-Scripting-Angriff durchzuführen.
Product
Cisco IP Phone ist ein Endgerät für IP-basierte Telefonie.
Vulnerabilities 3
-
Medium 5.3
Cisco IP Phone 7800, 8800, and 9800 Series Information Disclosure Vulnerability
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to …
-
Medium 4.8
Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) …
-
Medium 4.8
Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) …
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory cisco-sa-mpp-xss-8tAV2TvF vom 2024-11-06
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mpp-xss-8tAV2TvF
-
Cisco Security Advisory cisco-sa-phone-infodisc-sbyqQVbG vom 2024-11-06
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-infodisc-sbyqQVbG