Cisco IP Phone 6821 Firmware vulnerabilities

2 CVEs affecting Cisco IP Phone 6821 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3111, published 2020-02-05.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-3111, published 2020-02-05. High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload…
• CVE-2019-16008, published 2020-01-26. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)…