Description
A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.
Metrics
CVSS 3.1 5.9/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco IP Phones with Multiplatform Firmware | 11.3.1 MSR2-6; 11.3.1 MSR3-3; 11.3.2; 11.3.3; 11.3.1 MSR4-1; 11.3.4; 11.3.5; 11.3.3 MSR2; 11.3.3 MSR1; 11.3.6; 11-3-1MPPSR4UPG; 11.3.7; 11-3-1MSR2UPG; 11.3.6SR1; 11.3.7SR1; 11.3.7SR2; 11.0.0; 11.0.1; 11.0.1 MSR1-1; 11.0.2 |
| Cisco | Cisco PhoneOS | 1.0.1; 2.1.1; 2.0.1; 2.3.1 |
| cisco | ip_phone_6871_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_6821_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_6851_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_7821_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_6861_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_6825_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_6841_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_7811_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_7841_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_7861_with_multiplatform_firmware | <= 12.0.4 |
| cisco | ip_phone_8800_series_with_multiplatform_firmware | <= 12.0.4 |
| cisco | video_phone_8875_firmware | <= 12.0.4 |
References
Timeline
- Published
- May 1, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed