Cisco IP Phones with Multiplatform Firmware vulnerabilities
5 known vulnerabilities in Cisco IP Phones with Multiplatform Firmware from Cisco. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Cisco IP Phones with Multiplatform Firmware: Authentication Bypass by Primary Weakness
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpo
- 7.5 High severity
Cisco IP Phones with Multiplatform Firmware: Out-of-bounds Write
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-s
- 7.5 High severity
Cisco IP Phones with Multiplatform Firmware: Out-of-bounds Write
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities,
- 9.8 Critical severity
Cisco IP Phones with Multiplatform Firmware: Out-of-bounds Write
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities,
- 7.4 High severity
Cisco IP Phones with Multiplatform Firmware: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager (CUCM) is in secure mode. This vulnerability is due to improper key generation during the