CVE-2023-20079

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

• cisco ip phone 6871 firmware (< 11.3.7sr1) • cisco ip phone 6861 firmware (< 11.3.7sr1) • cisco ip phone 6851 firmware (< 11.3.7sr1) • cisco ip phone 6841 firmware (< 11.3.7sr1) • cisco ip phone 6825 firmware (< 11.3.7sr1) • cisco ip phone 7861 firmware (< 11.3.7sr1) • cisco ip phone 7841 firmware (< 11.3.7sr1) • cisco ip phone 7832 firmware (< 11.3.7sr1) • cisco ip phone 7821 firmware (< 11.3.7sr1) • cisco ip phone 7811 firmware (< 11.3.7sr1) • cisco ip phone 8865 firmware (< 11.3.7sr1) • cisco ip phone 8861 firmware (< 11.3.7sr1) • cisco ip phone 8851 firmware (< 11.3.7sr1) • cisco ip phone 8845 firmware (< 11.3.7sr1) • cisco ip phone 8841 firmware (< 11.3.7sr1) • cisco ip phone 8832 firmware (< 11.3.7sr1) • cisco ip phone 8811 firmware (< 11.3.7sr1) • cisco ip phone 8831 firmware (< 11.3.7sr1) • cisco unified ip phone 7945g firmware (< 11.3.7sr1) • cisco unified ip phone 7965g firmware (< 11.3.7sr1) • cisco unified ip phone 7975g firmware (< 11.3.7sr1)