cisco ip phone 8800 series firmware

Name: cisco ip phone 8800 series firmware
Brand: cisco

productUS

cpe:2.3:o:cisco:ip_phone_8800_series_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical6high5medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-6360US	high7.5	8.28% (95th)	—	no fix	2016-04-21	2 versions
CVE-2016-1421US	high7.5	4.12% (91st)	—	no fix	2016-06-10	= 11.0(1)
CVE-2016-1479US	high7.5	3.00% (87th)	—	no fix	2016-08-22	= 11.0(1)
CVE-2017-6630US	medium5.3	2.37% (84th)	—	no fix	2017-05-22	= 11.0(0.1)
CVE-2017-12328US	medium5.8	2.13% (82nd)	—	no fix	2017-11-30	= 11.0(0.1)
CVE-2018-0461US	high8.8	1.50% (74th)	—	no fix	2019-01-10	= 12.5(1)
CVE-2017-12305US	medium6.7	0.84% (58th)	—	no fix	2017-11-16	—
CVE-2016-1476US	medium5.4	0.80% (57th)	—	no fix	2016-08-22	= 11.0_base
CVE-2016-1434US	medium6.5	0.79% (56th)	—	no fix	2016-06-23	= 11.0(1)
CVE-2016-1403US	high7.8	0.51% (43rd)	—	no fix	2016-06-04	5 versions
CVE-2016-1435US	high7.0	0.27% (19th)	—	no fix	2016-06-23	= 11.0(1)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-264CWE-2641 CVEs
CWE-399CWE-3991 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.