CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service
Unauthenticated remote attackers can execute code with root privileges or cause a denial of service on Cisco IP Phones via crafted HTTP requests.
- Exploited in the wild
- Since 3 Nov 2021
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-3161?
CVE-2020-3161 is a critical command injection vulnerability in Cisco IP phone, published on 15 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.
Weakness: CWE-20
Which versions are affected by CVE-2020-3161?
It affects 13 products.
Products include Cisco 8831 Firmware, Cisco Ip Phone 7811 Firmware, Cisco Ip Phone 7821 Firmware, Cisco Ip Phone 7841 Firmware, Cisco Ip Phone 7861 Firmware, Cisco Ip Phone 8811 Firmware and 7 more.
How do I fix CVE-2020-3161?
No fix has been published for CVE-2020-3161 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 3 May 2022.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2020-3161 being exploited?
Yes. Attackers have exploited CVE-2020-3161 in the wild since at least 3 Nov 2021.
Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.
Sources
Also known as GHSA-74vv-6p4c-8fhj.