CVE-2024-20357

cisco ip phone 6871 with multiplatform firmware, cisco ip phone 7811 with multiplatform firmware, cisco ip phone 7821 with multiplatform firmware +15 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-20357

Katalog CVE

CVSS 5.9 · Medium EPSS 0,50%

Kerentanan Out-of-bounds Write pada cisco ip phone 6871 with multiplatform firmware, cisco ip phone 7811 with multiplatform firmware +16 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.

Rincian

Terbit di NVD
1 Mei 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.9 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,50% peluang dieksploitasi; lebih tinggi dari 41,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ip phone 6871 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7811 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7821 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7832 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7841 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7861 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8811 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8832 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8841 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8845 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8851 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8861 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8865 with multiplatform firmware Semua versi hingga 12.0.4
cisco video phone 8875 firmware Semua versi sebelum 2.3.1.0101
cisco ip phone 6821 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 6841 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 6851 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 6861 with multiplatform firmware Semua versi hingga 12.0.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.