CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-04-15
Cisco IP Phone Web Server Remote Code Execution and DoS Vulnerability (CVE-2020-3161) Technical Advisory
[Affected Scope] Cisco IP Phone series running vulnerable firmware versions with the web server service enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or trigger a device reload, leading to a Denial of Service (DoS) condition
[Mitigation] Apply official vendor firmware patches immediately, or disable the Web Access feature and restrict HTTP/HTTPS access via ACLs