Cisco IP Phone 7800 and 8800 Series Web Management Interface Authentication Bypass Vulnerability
A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to access certain parts of the web interface that would normally require authentication. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-20018US | medium6.5OT erhöht | — | ||
A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- Cisco IP Phone 7800 and 8800 Series Web Management Interface Authentication Bypass Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- free software updatesexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- Cisco Support and Downloads pageexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
Behebungen (1)
- BehobenCisco Session Initiation Protocol (SIP) Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan