CVE-2020-3111 Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability
An adjacent attacker can execute arbitrary code with root privileges or cause a denial of service on Cisco IP Phones via crafted CDP packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-3111?
CVE-2020-3111 is a high-severity memory corruption vulnerability in Cisco IP phone, published on 5 Feb 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
Weakness: CWE-20
Which versions are affected by CVE-2020-3111?
It affects 33 products.
Products include Cisco Ip Conference Phone 7832 Firmware, Cisco Ip Conference Phone 7832 With Multiplatform Firmware, Cisco Ip Conference Phone 8832 Firmware, Cisco Ip Conference Phone 8832 With Multiplatform Firmware, Cisco Ip Phone 6821 Firmware, Cisco Ip Phone 6841 Firmware and 27 more.
How do I fix CVE-2020-3111?
No fix has been published for CVE-2020-3111 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-3111 being exploited?
There is no known exploitation of CVE-2020-3111 in the wild and no public exploit code.
Other vulnerabilities in Cisco IP phone
- CVE-2019-1635 Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability
- CVE-2021-1379 Memory corruption in Cisco IP Phones with Multiplatform Firmware
- CVE-2019-1684 Denial of service in Cisco IP Phone 8800 Series Software
- CVE-2021-34711 Cisco IP Phone Software Arbitrary File Read Vulnerability
- CVE-2019-1922 Cisco IP Phone 7800 and 8800 Series Session Initiation Protocol Denial of Service Vulnerability
Sources
Also known as GHSA-w6xx-2hjv-77cm.