cisco ip phone 8811 firmware

Name: cisco ip phone 8811 firmware
Brand: cisco

productUS

cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical8high6medium0low

updated 2026-10-27

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-3161US	critical9.8OT critical	83.9% (100th)	KEV	no fix	2020-04-15	3 versions
CVE-2023-20078US	critical9.8	10.4% (96th)	—	11.3.7sr1	2023-03-03	< 11.3.7sr1
CVE-2023-20079US	high7.5	10.3% (96th)	—	11.3.7sr1	2023-03-03	< 11.3.7sr1
CVE-2020-3574US	high7.5	8.03% (95th)	—	11.3.2	2020-11-06	< 11.3.2
CVE-2022-20968US	high8.8	6.35% (94th)	—	no fix	2022-12-12	54 versions
CVE-2020-3111US	high8.8	3.09% (88th)	—	12.7\(1\)	2020-02-05	< 12.7\(1\)
CVE-2019-1635US	high7.5	1.97% (80th)	—	no fix	2019-05-03	4 versions
CVE-2019-1922US	high7.5	1.32% (71st)	—	no fix	2019-07-06	2 versions
CVE-2019-1684US	medium6.5	0.64% (50th)	—	12.6\(1\)mn80	2019-02-21	< 12.6\(1\)mn80
CVE-2019-16008US	medium5.4	0.63% (50th)	—	11.3\(1\)	2020-01-26	< 11.3\(1\)
CVE-2023-20018US	medium6.5OT elevated	0.61% (49th)	—	14.1\(1\)sr2	2023-01-20	< 14.1\(1\)sr2
CVE-2025-20350US	—	0.48% (41st)	—	14.3\(1\)	2025-10-15	2 versions
CVE-2024-20445US	—	0.44% (38th)	—	14.3\(1\)	2024-11-06	< 14.3\(1\)
CVE-2022-20774US	high8.1OT elevated	0.40% (34th)	—	11.3.5	2022-04-06	< 11.3.5
CVE-2025-20336US	high7.5	0.39% (33rd)	—	14.3\(1\)	2025-09-03	2 versions
CVE-2025-20335US	—	0.35% (29th)	—	14.3\(1\)	2025-09-03	2 versions
CVE-2022-20660US	medium4.6OT elevated	0.35% (29th)	—	14.1\(1\)	2022-01-14	< 14.1\(1\)
CVE-2021-1379US	—	0.33% (26th)	—	12.8\(1\)	2024-11-18	2 versions
CVE-2021-33478US	medium6.8	0.30% (23rd)	—	14.0\(1\)	2021-07-22	< 14.0\(1\)
CVE-2025-20351US	—	0.29% (21st)	—	14.3\(1\)	2025-10-15	2 versions
CVE-2021-34711US	medium5.5	0.27% (18th)	—	14.1\(1\)	2021-10-06	< 14.1\(1\)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-399CWE-3992 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.