Cisco IP Phone

productDE

cpe:/h:cisco:ip_phone:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical14high25medium5low

updated 2026-10-26

vulnerabilities (49)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	no fix	2016-09-01	—
CVE-2016-0800US	medium5.9	82.1% (100th)	Exploit	no fix	2016-03-01	—
CVE-2018-5391US	high7.5	32.4% (98th)	Exploit	no fix	2018-09-06	—
CVE-2020-25686US	low3.7OT elevated	5.47% (93rd)	Exploit	no fix	2021-01-20	—
CVE-2016-0702US	medium5.1	1.91% (80th)	Exploit	no fix	2016-03-03	—
CVE-2020-25687US	medium5.9	89.3% (100th)	—	no fix	2021-01-20	—
CVE-2020-25683US	medium5.9	88.7% (100th)	—	no fix	2021-01-20	—
CVE-2020-25681US	high8.1	84.1% (100th)	—	no fix	2021-01-20	—
CVE-2020-25682US	high8.1	75.1% (100th)	—	no fix	2021-01-20	—
CVE-2016-6304US	high7.5	63.0% (99th)	—	no fix	2016-09-26	—
CVE-2016-2177US	critical9.8	44.5% (99th)	—	no fix	2016-06-20	—
CVE-2016-2182US	critical9.8	44.2% (99th)	—	no fix	2016-09-16	—
CVE-2016-6306US	medium5.9	41.7% (99th)	—	no fix	2016-09-26	—
CVE-2016-0799US	critical9.8	32.4% (98th)	—	no fix	2016-03-03	—
CVE-2016-6303US	critical9.8	32.0% (98th)	—	no fix	2016-09-16	—
CVE-2016-2180US	high7.5	30.0% (98th)	—	no fix	2016-08-01	—
CVE-2016-6302US	high7.5	27.8% (98th)	—	no fix	2016-09-16	—
CVE-2016-0797US	high7.5	27.0% (98th)	—	no fix	2016-03-03	—
CVE-2016-2179US	high7.5	26.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-0798US	high7.5	24.4% (98th)	—	no fix	2016-03-03	—
CVE-2016-2181US	high7.5	22.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-6305US	high7.5	16.0% (97th)	—	no fix	2016-09-26	—
CVE-2016-6307US	medium5.9	13.8% (97th)	—	no fix	2016-09-26	—
CVE-2020-11264US	critical9.8	13.2% (96th)	—	no fix	2021-09-08	—
CVE-2016-6308US	medium5.9	12.2% (96th)	—	no fix	2016-09-26	—
CVE-2020-11301US	high7.5	11.1% (96th)	—	no fix	2021-09-08	—
CVE-2020-26147US	medium5.4	7.60% (95th)	—	no fix	2021-05-11	—
CVE-2016-0704US	medium5.9	6.90% (94th)	—	no fix	2016-03-02	—
CVE-2020-26139US	medium5.3	6.49% (94th)	—	no fix	2021-05-11	—
CVE-2020-24586US	low3.5	5.76% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26146US	medium5.3	5.62% (93rd)	—	no fix	2021-05-11	—
CVE-2016-0703US	medium5.9	5.40% (93rd)	—	no fix	2016-03-02	—
CVE-2020-26144US	medium6.5	4.91% (92nd)	—	no fix	2021-05-11	—
CVE-2017-13082US	high8.1OT elevated	4.58% (92nd)	—	no fix	2017-10-17	—
CVE-2020-26143US	medium6.5	4.17% (91st)	—	no fix	2021-05-11	—
CVE-2020-25684US	low3.7	4.16% (91st)	—	no fix	2021-01-20	—
CVE-2020-26141US	medium6.5OT elevated	3.07% (88th)	—	no fix	2021-05-11	—
CVE-2020-26140US	medium6.5OT elevated	2.92% (87th)	—	no fix	2021-05-11	—
CVE-2020-24587US	low2.6OT elevated	2.59% (85th)	—	no fix	2021-05-11	—
CVE-2017-13080US	medium5.3OT elevated	2.28% (83rd)	—	no fix	2017-10-17	—
CVE-2020-25685US	low3.7	2.23% (83rd)	—	no fix	2021-01-20	—
CVE-2017-13084US	medium6.8OT elevated	2.21% (82nd)	—	no fix	2017-10-17	—
CVE-2017-13079US	medium5.3OT elevated	2.12% (82nd)	—	no fix	2017-10-17	—
CVE-2020-26142US	medium5.3	2.08% (81st)	—	no fix	2021-05-11	—
CVE-2017-13086US	medium6.8OT elevated	2.05% (81st)	—	no fix	2017-10-17	—
CVE-2017-13081US	medium5.3OT elevated	1.98% (80th)	—	no fix	2017-10-17	—
CVE-2017-13088US	medium5.3OT elevated	1.81% (78th)	—	no fix	2017-10-17	—
CVE-2017-13087US	medium5.3OT elevated	1.74% (78th)	—	no fix	2017-10-17	—
CVE-2016-2178US	medium5.5	1.24% (69th)	—	no fix	2016-06-20	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-330Use of Insufficiently Random Values9 CVEs
CWE-320CWE-3208 CVEs
CWE-322Key Exchange without Entity Authentication8 CVEs
CWE-323Reusing a Nonce, Key Pair in Encryption8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-290Authentication Bypass by Spoofing4 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)49 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan