How severe is CVE-2020-3574?

CVE-2020-3574 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2020-3574 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 8% (94th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2020-3574?

CVE-2020-3574 primarily affects Cisco Ip Dect 210 Firmware. In total, 8 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2020-3574?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2020-3574 published?

CVE-2020-3574 was published on 2020-11-06 and last updated on 2026-06-17.

CVE-2020-3574

CVE-2020-3574 is a high-severity vulnerability in Cisco Ip Dect 210 Firmware with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-371.

Key facts

Severity: High (CVSS 3.x base score 7.5)
CVSS v2: 7.8
EPSS exploit prediction: 8% (94th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-371
Affected product: Cisco Ip Dect 210 Firmware
Published: 2020-11-06
Last modified: 2026-06-17

Description

A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected calls, or unexpectedly reload. The vulnerability is due to insufficient TCP ingress packet rate limiting. An attacker could exploit this vulnerability by sending a high and sustained rate of crafted TCP traffic to the targeted device. A successful exploit could allow the attacker to impact operations of the phone or cause the phone to reload, leading to a denial of service (DoS) condition.

Frequently asked questions

What is CVE-2020-3574?: A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected calls, or unexpectedly reload. The vulnerability is due to insufficient TCP ingress packet rate limiting. An attacker could exploit this vulnerability by sending a high and sustained rate of crafted TCP traffic to the targeted device. A successful exploit could allow the attacker to impact operations of the phone or cause the phone to reload, leading to a denial of service (DoS) condition.
How severe is CVE-2020-3574?: CVE-2020-3574 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2020-3574 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 8% (94th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2020-3574?: CVE-2020-3574 primarily affects Cisco Ip Dect 210 Firmware. In total, 8 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2020-3574?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2020-3574 published?: CVE-2020-3574 was published on 2020-11-06 and last updated on 2026-06-17.

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phone-flood-dos-YnU9EXOv

Affected products (8)

cpe:2.3:o:cisco:ip_dect_210_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ip_dect_6825_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:9.3\(4\):servicerelease3:*:*:*:*:*:*
cpe:2.3:o:cisco:webex_room_phone_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Cisco Ip Dect 210 Firmware

CVE-2023-20265 — Medium (CVSS 5.5): A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an…

All CVEs affecting Cisco Ip Dect 210 Firmware →

Other CWE-371 vulnerabilities

CVE-2024-20455 — High (CVSS 8.6): A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of…
CVE-2020-3422 — High (CVSS 7.5): A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow an…
CVE-2019-1977 — Medium (CVSS 6.8): A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric…
CVE-2018-0282 — Medium (CVSS 6.8): A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker…
CVE-2020-3385 — Medium (CVSS 6.5): A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an…
CVE-2026-14685 — Low (CVSS 3.3): A vulnerability has been found in HdrHistogram up to 2.2.2. This vulnerability affects the function…

Browse all CWE-371 vulnerabilities →