CVE-2021-1379
published 2024-11-18CVE-2021-1379: Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx…
PriorityP430medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.32%
23.6th percentile
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.
These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Affected
178 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_ip_phones_with_multiplatform_firmware | — | — |
| cisco | cisco_session_initiation_protocol_software | — | — |
| cisco | cisco_session_initiation_protocol_software | — | — |
| cisco | cisco_session_initiation_protocol_software | — | — |
| cisco | cisco_session_initiation_protocol_software | — | — |
| cisco | cisco_session_initiation_protocol_software | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_cisco6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-722m-4rr5-cvfh: Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/
ghsa_unreviewed·2024-11-18
CVE-2021-1379 [MEDIUM] CWE-120 GHSA-722m-4rr5-cvfh: Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.
These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker
Cisco
Cisco IP Phones Buffer Overflow and Denial of Service Vulnerabilities
vendor_cisco·2021-03-03·CVSS 6.5
CVE-2021-1379 [MEDIUM] CWE-120 Cisco IP Phones Buffer Overflow and Denial of Service Vulnerabilities
Cisco IP Phones Buffer Overflow and Denial of Service Vulnerabilities
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.
These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.
Note: Cisco Discovery Prot
Cisco
Cisco IP Phones Buffer Overflow and Denial of Service Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2021-1379 Cisco IP Phones Buffer Overflow and Denial of Service Vulnerabilities
CVE-2021-1379: Cisco IP Phones Buffer Overflow and Denial of Service Vulnerabilities
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition. Note : Cisco
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-11-18
Published