Exploited Vulnerabilities DailyCVE-2020-3161: Cisco Cisco IP Phones
EPSS83.8%No. 575 of 1739 in KEV
CVE year2020~1 yrs before listing
Same vendor in KEV100
Same product1
| Field | Value |
|---|---|
| Vendor | Cisco |
| Product | Cisco IP Phones |
| Name | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Unknown |
| CWE | CWE-20 |
CISA description
Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code remotely with root privileges or cause a denial-of-service (DoS) condition.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Cisco Cisco IP Phones vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.