Cisco Ip Phone 8800 Series Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Ip Phone 8800 Series Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2016-1403 — CVSS 7.8 (high): CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI…
• CVE-2016-1479 — CVSS 7.5 (high): Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted…
• CVE-2016-1421 — CVSS 7.5 (high): A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root…
• CVE-2015-6360 — CVSS 7.5 (high): The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in…
• CVE-2016-1435 — CVSS 7.0 (high): Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to…
• CVE-2017-12305 — CVSS 6.7 (medium): A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary…
• CVE-2018-0461 — CVSS 6.5 (medium): A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an arbitrary script…
• CVE-2016-1434 — CVSS 6.5 (medium): The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete…
• CVE-2017-12328 — CVSS 5.8 (medium): A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated…
• CVE-2016-1476 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject…
• CVE-2017-6630 — CVSS 5.3 (medium): A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated…