CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Засегнати продукти
- Cisco Cisco IP Phones with Multiplatform Firmware: 11.3.1 MSR2-6; 11.3.1 MSR3-3; 11.3.2; 11.3.3; 11.3.1 MSR4-1; 11.3.4; 11.3.5; 11.3.3 MSR2; 11.3.3 MSR1; 11.3.6; 11-3-1MPPSR4UPG; 11.3.7; 11-3-1MSR2UPG; 11.3.6SR1; 11.3.7SR1; 11.3.7SR2; 11.0.0; 11.0.1; 11.0.1 MSR1-1; 11.0.2; 11.1.1; 11.1.1 MSR1-1; 11.1.1 MSR2-1; 11.1.2; 11.1.2 MSR1-1; 11.1.2 MSR3-1; 11.2.1; 11.2.2; 11.2.3; 11.2.3 MSR1-1; 11.2.4; 11.3.1; 11.3.1 MSR1-3; 4.5; 4.6 MSR1; 4.7.1; 4.8.1; 4.8.1 SR1; 5.0.1; 12.0.1; 12.0.2; 12.0.3; 12.0.3SR1; 12.0.4; 5.1.1; 5.1.2; 5.1(2)SR1
- Cisco Cisco PhoneOS: 1.0.1; 2.1.1; 2.0.1; 2.3.1
cisco: още 12 продукта, добавени от cisco
ip_phone_6871_with_multiplatform_firmware, ip_phone_6821_with_multiplatform_firmware, ip_phone_6851_with_multiplatform_firmware, ip_phone_7821_with_multiplatform_firmware, ip_phone_6861_with_multiplatform_firmware, ip_phone_6825_with_multiplatform_firmware, ip_phone_6841_with_multiplatform_firmware, ip_phone_7811_with_multiplatform_firmware, ip_phone_7841_with_multiplatform_firmware, ip_phone_7861_with_multiplatform_firmware, ip_phone_8800_series_with_multiplatform_firmware, video_phone_8875_firmware
Вид слабост
История
- 1 май 2024 Публикувано