csirt@kutim:~/threat-intel/cve/CVE-2023-20221

Katalog CVE

CVSS 6.5 · Medium EPSS 0,33%

Kerentanan Cross-Site Request Forgery (CSRF) pada cisco video phone 8875 firmware, cisco ip phone 6821 with multiplatform firmware +1 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition.

Rincian

Terbit di NVD
16 Agustus 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-352: Cross-Site Request Forgery (CSRF)
EPSS (30 hari)
0,33% peluang dieksploitasi; lebih tinggi dari 23,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco video phone 8875 firmware Semua versi sebelum 2.0
cisco ip phone 6821 with multiplatform firmware Versi 11-3-1mppsr4upg
cisco ip phone 6821 with multiplatform firmware Versi 11-3-1msr2upg
cisco ip phone 6821 with multiplatform firmware Versi 11.0.0
cisco ip phone 6821 with multiplatform firmware Versi 11.0.1
cisco ip phone 6821 with multiplatform firmware Versi 11.0.1_msr1-1
cisco ip phone 6821 with multiplatform firmware Versi 11.0.2
cisco ip phone 6821 with multiplatform firmware Versi 11.1.1
cisco ip phone 6821 with multiplatform firmware Versi 11.1.1_msr1-1
cisco ip phone 6821 with multiplatform firmware Versi 11.1.1_msr2-1
cisco ip phone 6821 with multiplatform firmware Versi 11.1.2
cisco ip phone 6821 with multiplatform firmware Versi 11.1.2_msr1-1
cisco ip phone 6821 with multiplatform firmware Versi 11.1.2_msr3-1
cisco ip phone 6821 with multiplatform firmware Versi 11.2.1
cisco ip phone 6821 with multiplatform firmware Versi 11.2.2
cisco ip phone 6821 with multiplatform firmware Versi 11.2.3
cisco ip phone 6821 with multiplatform firmware Versi 11.2.3_msr1-1
cisco ip phone 6821 with multiplatform firmware Versi 11.2.4
cisco ip phone 6821 with multiplatform firmware Versi 11.3.1
cisco ip phone 6821 with multiplatform firmware Versi 11.3.1_msr1-3
cisco ip phone 6821 with multiplatform firmware Versi 11.3.1_msr2-6
cisco ip phone 6821 with multiplatform firmware Versi 11.3.1_msr3-3
cisco ip phone 6821 with multiplatform firmware Versi 11.3.2
cisco ip phone 6821 with multiplatform firmware Versi 11.3.3
cisco ip phone 6821 with multiplatform firmware Versi 11.3.3_msr1
cisco ip phone 6821 with multiplatform firmware Versi 11.3.4
cisco ip phone 6821 with multiplatform firmware Versi 11.3.5
cisco ip phone 6821 with multiplatform firmware Versi 11.3.6
cisco ip phone 6821 with multiplatform firmware Versi 11.3.6sr1
cisco ip phone 6821 with multiplatform firmware Versi 11.3.7
cisco ip phone 6821 with multiplatform firmware Versi 11.3.7sr1
cisco ip phone 6821 with multiplatform firmware Versi 11.3.7sr2
cisco ip phone 6825 with multiplatform firmware Versi 11-3-1mppsr4upg
cisco ip phone 6825 with multiplatform firmware Versi 11-3-1msr2upg
cisco ip phone 6825 with multiplatform firmware Versi 11.0.0
cisco ip phone 6825 with multiplatform firmware Versi 11.0.1
cisco ip phone 6825 with multiplatform firmware Versi 11.0.1_msr1-1
cisco ip phone 6825 with multiplatform firmware Versi 11.0.2
cisco ip phone 6825 with multiplatform firmware Versi 11.1.1
cisco ip phone 6825 with multiplatform firmware Versi 11.1.1_msr1-1
cisco ip phone 6825 with multiplatform firmware Versi 11.1.1_msr2-1
cisco ip phone 6825 with multiplatform firmware Versi 11.1.2
cisco ip phone 6825 with multiplatform firmware Versi 11.1.2_msr1-1
cisco ip phone 6825 with multiplatform firmware Versi 11.1.2_msr3-1
cisco ip phone 6825 with multiplatform firmware Versi 11.2.1
cisco ip phone 6825 with multiplatform firmware Versi 11.2.2
cisco ip phone 6825 with multiplatform firmware Versi 11.2.3
cisco ip phone 6825 with multiplatform firmware Versi 11.2.3_msr1-1
cisco ip phone 6825 with multiplatform firmware Versi 11.2.4
cisco ip phone 6825 with multiplatform firmware Versi 11.3.1
cisco ip phone 6825 with multiplatform firmware Versi 11.3.1_msr1-3
cisco ip phone 6825 with multiplatform firmware Versi 11.3.1_msr2-6
cisco ip phone 6825 with multiplatform firmware Versi 11.3.1_msr3-3
cisco ip phone 6825 with multiplatform firmware Versi 11.3.2
cisco ip phone 6825 with multiplatform firmware Versi 11.3.3
cisco ip phone 6825 with multiplatform firmware Versi 11.3.3_msr1
cisco ip phone 6825 with multiplatform firmware Versi 11.3.4
cisco ip phone 6825 with multiplatform firmware Versi 11.3.5
cisco ip phone 6825 with multiplatform firmware Versi 11.3.6
cisco ip phone 6825 with multiplatform firmware Versi 11.3.6sr1

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 683 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.