Cisco IP Phone 8800 Firmware vulnerabilities

9 CVEs affecting Cisco IP Phone 8800 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20018, published 2023-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0325, published 2018-05-17. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote…
CVE-2019-1716, published 2019-03-22. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated,…
CVE-2019-1763, published 2019-03-22. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to bypass…
CVE-2019-1766, published 2019-03-22. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk…
CVE-2019-1765, published 2019-03-22. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary…
CVE-2019-1764, published 2019-03-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a…
CVE-2019-1684, published 2019-02-21. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to…
CVE-2023-20018, published 2023-01-20. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. …
CVE-2021-33478, published 2021-07-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted…