CVE-2019-16008

cisco ip phone 6841 firmware, cisco ip phone 6851 firmware, cisco ip phone 6825 firmware +16 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2019-16008

Katalog CVE

CVSS 5.4 · Medium EPSS 0,63%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada cisco ip phone 6841 firmware, cisco ip phone 6851 firmware +17 lainnya. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based GUI of an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Rincian

Terbit di NVD
26 Januari 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,63% peluang dieksploitasi; lebih tinggi dari 48,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ip phone 6841 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 6851 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 6825 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 6861 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 6871 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 6821 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 7811 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 7821 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 7832 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 7841 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 7861 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 8811 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 8831 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 8832 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 8841 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 8845 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 8851 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 8861 firmware Semua versi sebelum 11.3\(1\)
cisco ip phone 8865 firmware Semua versi sebelum 11.3\(1\)

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.