Cisco Unified IP Phone 7975g Firmware vulnerabilities

3 CVEs affecting Cisco Unified IP Phone 7975g Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20079, published 2023-03-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-20079, published 2023-03-03. High severity, CVSS 7.5. EPSS: 10.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS)…
CVE-2020-3360, published 2020-06-18. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. The…
CVE-2022-20660, published 2022-01-14. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device.…