Tracker / CVE-2020-3161
CVE-2020-3161
Exploited Critical 9.8
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.
Affected products and versions
| cisco | 8831_firmware |
|---|---|
| cisco | ip_phone_7811_firmware |
| cisco | ip_phone_7821_firmware |
| cisco | ip_phone_7841_firmware |
| cisco | ip_phone_7861_firmware |
| cisco | ip_phone_8811_firmware |
| cisco | ip_phone_8821-ex_firmware |
| cisco | ip_phone_8821_firmware |
| cisco | ip_phone_8841_firmware |
| cisco | ip_phone_8845_firmware |
| cisco | ip_phone_8851_firmware |
| cisco | ip_phone_8861_firmware |
| cisco | ip_phone_8865_firmware |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.