Cisco IP Phone 7841 With Multiplatform Firmware vulnerabilities

8 CVEs affecting Cisco IP Phone 7841 With Multiplatform Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1379, published 2024-11-18.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-3111, published 2020-02-05. High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload…
• CVE-2024-20376, published 2024-05-01. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. …
• CVE-2024-20378, published 2024-05-01. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This…
• CVE-2024-20357, published 2024-05-01. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because…
• CVE-2021-1379, published 2024-11-18. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated,…
• CVE-2023-20221, published 2023-08-16. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site…
• CVE-2024-20534, published 2024-11-06. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated,…
• CVE-2024-20533, published 2024-11-06. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated,…