CVE-2024-20357
Medium
Description
A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Cisco Ip Phone 6871 With Multiplatform Firmware
PublishedMay 1, 2024
First seenMay 1, 2024
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- cisco video_phone_8875_firmware2.3.1.0101 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ip_phone_6871_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_7811_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_7821_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_7832_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_7841_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_7861_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_8811_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_8832_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_8841_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_8845_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_8851_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_8861_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_8865_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco video_phone_8875_firmware | v < 2.3.1.0101 | 2.3.1.0101 |
| cisco ip_phone_6821_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_6841_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_6851_with_multiplatform_firmware | v ≤ 12.0.4 | — |
| cisco ip_phone_6861_with_multiplatform_firmware | v ≤ 12.0.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.