Cisco IP Phone 7800 Firmware vulnerabilities

3 CVEs affecting Cisco IP Phone 7800 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20018, published 2023-01-20.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-0325, published 2018-05-17. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote…
• CVE-2019-1684, published 2019-02-21. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to…
• CVE-2023-20018, published 2023-01-20. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. …