CVE-2024-20376

cisco video phone 8875 firmware, cisco ip phone 6821 with multiplatform firmware, cisco ip phone 6841 with multiplatform firmware +15 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-20376

Katalog CVE

CVSS 7.5 · High EPSS 0,88%

Kerentanan Out-of-bounds Write pada cisco video phone 8875 firmware, cisco ip phone 6821 with multiplatform firmware +16 lainnya. Skor CVSS 3.1 7.5 (High) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.

Rincian

Terbit di NVD
1 Mei 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.5 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,88% peluang dieksploitasi; lebih tinggi dari 58,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco video phone 8875 firmware Semua versi sebelum 2.3.1.0101
cisco ip phone 6821 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 6841 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 6851 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 6861 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 6871 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7811 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7821 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7832 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7841 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 7861 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8811 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8832 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8841 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8845 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8851 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8861 with multiplatform firmware Semua versi hingga 12.0.4
cisco ip phone 8865 with multiplatform firmware Semua versi hingga 12.0.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.