IP Phone 8865 Firmware vulnerabilities
7 known vulnerabilities in IP Phone 8865 Firmware from Cisco. 7 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Cisco Session Initiation Protocol (SIP) Software: Stack-based Buffer Overflow
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulne
- 7.5 High severity
Cisco Session Initiation Protocol (SIP) Software: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerabil
- 7.5 High severity
Cisco IP Phones with Multiplatform Firmware: Out-of-bounds Write
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities,
- 9.8 Critical severity
Cisco IP Phones with Multiplatform Firmware: Out-of-bounds Write
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities,
- 8.8 High severity
Cisco Session Initiation Protocol (SIP) Software: Out-of-bounds Write
A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device. This vulnerability is due to insufficient inpu
- 8.1 High severity
Cisco IP Phone 7800 Series with Multiplatform…: Cross-Site Request Forgery
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-base
- 9.8 Critical severity
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Exploited
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to