CVE-2020-3111: Cisco IP Conference Phone 7832 Firmware

High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days.

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Affected products

Cisco IP Conference Phone 7832 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Conference Phone 7832 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Conference Phone 8832 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Conference Phone 8832 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 6821 Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 6841 Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 6851 Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 6861 Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 6871 Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 7811 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Phone 7811 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 7821 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Phone 7821 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 7841 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Phone 7841 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 7861 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Phone 7861 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 8811 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Phone 8811 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 8841 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Phone 8841 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 8845 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Phone 8845 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
Cisco IP Phone 8851 Firmware: before 12.7\(1\) (fixed in 12.7\(1\))
Cisco IP Phone 8851 With Multiplatform Firmware: before 11.3\(1\)sr1 (fixed in 11.3\(1\)sr1)
and 8 more

Published 2020-02-05. Last modified 2026-06-17.