CVE-2022-20774

cisco ip phone 6871 firmware, cisco ip phone 6861 firmware, cisco ip phone 6851 firmware +14 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-20774

Katalog CVE

CVSS 8.1 · High EPSS 0,40%

Kerentanan Insufficient Verification of Data Authenticity pada cisco ip phone 6871 firmware, cisco ip phone 6861 firmware +15 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based interface of an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform configuration changes on the affected device, resulting in a denial of service (DoS) condition.

Rincian

Terbit di NVD
6 April 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-345: Insufficient Verification of Data Authenticity
CWE-352: Cross-Site Request Forgery (CSRF)
EPSS (30 hari)
0,40% peluang dieksploitasi; lebih tinggi dari 32,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ip phone 6871 firmware Semua versi sebelum 11.3.5
cisco ip phone 6861 firmware Semua versi sebelum 11.3.5
cisco ip phone 6851 firmware Semua versi sebelum 11.3.5
cisco ip phone 6841 firmware Semua versi sebelum 11.3.5
cisco ip phone 6825 firmware Semua versi sebelum 11.3.5
cisco ip phone 7861 firmware Semua versi sebelum 11.3.5
cisco ip phone 7841 firmware Semua versi sebelum 11.3.5
cisco ip phone 7832 firmware Semua versi sebelum 11.3.5
cisco ip phone 7821 firmware Semua versi sebelum 11.3.5
cisco ip phone 7811 firmware Semua versi sebelum 11.3.5
cisco ip phone 8865 firmware Semua versi sebelum 11.3.5
cisco ip phone 8861 firmware Semua versi sebelum 11.3.5
cisco ip phone 8851 firmware Semua versi sebelum 11.3.5
cisco ip phone 8845 firmware Semua versi sebelum 11.3.5
cisco ip phone 8841 firmware Semua versi sebelum 11.3.5
cisco ip phone 8832 firmware Semua versi sebelum 11.3.5
cisco ip phone 8811 firmware Semua versi sebelum 11.3.5

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.