CVE-2022-20968: Cisco IP Phone 7811 Firmware

High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days.

A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device. This vulnerability is due to insufficient input validation of received Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol traffic to an affected device. A successful exploit could allow the attacker to cause a stack overflow, resulting in possible remote code execution or a denial of service (DoS) condition on an affected device.

Affected products

Cisco IP Phone 7811 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 7821 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 7832 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 7841 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 7861 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 8811 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 8831 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 8832 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 8841 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 8845 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 8851 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 8861 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …
Cisco IP Phone 8865 Firmware: version 9.3(3) only; version 9.3(4) only; version 9.3(4)sr1 only; version 9.3(4)sr2 only; version 9.3(4)sr3 only; version 10.1(1)sr1 only; …

Published 2022-12-12. Last modified 2026-06-17.