Cisco Wireless IP Phone 8821 Firmware vulnerabilities

8 CVEs affecting Cisco Wireless IP Phone 8821 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1379, published 2024-11-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3111, published 2020-02-05. High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload…
CVE-2020-26141, published 2021-05-11. Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days. An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An…
CVE-2019-1635, published 2019-05-03. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to…
CVE-2023-20018, published 2023-01-20. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. …
CVE-2022-20660, published 2022-01-14. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device.…
CVE-2021-1379, published 2024-11-18. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated,…
CVE-2021-33478, published 2021-07-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted…
CVE-2021-34711, published 2021-10-06. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input…