CVE-2020-3111
published 2020-02-05CVE-2020-3111: A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute…
PriorityP355high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
3.09%
86.3th percentile
A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_ip_phone | >= unspecified < 12.7(1) | 12.7(1) |
| cisco | ip_conference_phone_7832_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_conference_phone_7832_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_conference_phone_8832_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_conference_phone_8832_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone | — | — |
| cisco | ip_phone_6821_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_6841_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_6851_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_6861_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_6871_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_7811_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_phone_7811_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_7821_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_phone_7821_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_7841_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_phone_7841_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_7861_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_phone_7861_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_8811_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_phone_8811_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_8841_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_phone_8841_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
| cisco | ip_phone_8845_firmware | < 12.7\(1\) | 12.7\(1\) |
| cisco | ip_phone_8845_with_multiplatform_firmware | < 11.3\(1\)sr1 | 11.3\(1\)sr1 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.08.8HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.08.3HIGHAV:A/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability
vendor_cisco·2020-02-05·CVSS 8.8
CVE-2020-3111 [HIGH] CWE-20 Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability
Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability
A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone.
The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition.
Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker m
Cisco
Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2020-3111 Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability
CVE-2020-3111: Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability
A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability,
GHSA
GHSA-w6xx-2hjv-77cm: A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely ex
ghsa_unreviewed·2022-05-24
CVE-2020-3111 [HIGH] GHSA-w6xx-2hjv-77cm: A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely ex
A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
No detection rules found.
No public exploits indexed.
http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.htmlhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-voip-phones-rce-doshttp://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.htmlhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-voip-phones-rce-dos
2020-02-05
Published